TTSWP only sets analytics and marketing cookies if you say yes. Necessary cookies keep the site running and are always on. Everything else waits for your choice in the cookie banner, and your choice applies to both ttswp.com and app.ttswp.com.
Necessary cookies (always on)
These keep the site working: session continuity, CSRF protection, the cross-domain auth bridge with our app at app.ttswp.com, and remembering your cookie choice. Under the EU ePrivacy Directive and GDPR Article 6, these do not require consent because they are strictly necessary to deliver the service you asked for.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| ttswp-session | Identifies your browser session so the site remembers you between page loads | ttswp.com | 2 hours of inactivity |
| XSRF-TOKEN | Cross-site request forgery protection on form submissions | ttswp.com | Session |
| tts_auth | Tells ttswp.com that you are signed in to app.ttswp.com so the navigation shows Dashboard instead of Sign In. HMAC-signed payload with no session token. | .ttswp.com | Set by app.ttswp.com (typically tied to your sign-in session length) |
| tts_consent | Remembers your cookie choice so the banner does not ask again. Shared with app.ttswp.com. | .ttswp.com | 12 months |
| __cf_bm | Cloudflare bot management: blocks automated traffic and credential stuffing. Set automatically by Cloudflare when Bot Fight Mode is enabled. | .ttswp.com | 30 minutes |
Analytics cookies (only with your consent)
We use Google Analytics, loaded through Google Tag Manager, to see which pages people read, how visitors find us, and how many go on to create an account. It only runs after you accept analytics cookies.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| _ga | Google Analytics: tells visits from the same browser apart | .ttswp.com | 2 years |
| _ga_LF0SM4BR4X | Google Analytics: keeps track of the current visit | .ttswp.com | 2 years |
Marketing cookies (only with your consent)
These tell us which ads bring visitors who sign up or buy, so we spend less on ads that do not work. They only run after you accept marketing cookies.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| _gcl_au | Google Ads: links a sign-up or purchase to the ad that brought you here | .ttswp.com | 90 days |
| _gcl_aw | Google Ads: stores the ad click ID when you arrive from a Google ad | .ttswp.com | 90 days |
Browser storage transparency
The blog audio player uses the browser's sessionStorage (not cookies) to remember if you dismissed the sticky audio player on a given post. Keys look like ttswp.audio.dismissed.{post-slug}. SessionStorage clears when the tab closes. No tracking, no cross-page persistence beyond the current tab.
Managing cookies
You can change or withdraw your choice at any time with the Cookie settings link in the footer or the button at the top of this page. If you withdraw consent, we stop the analytics and marketing tags and delete their cookies from your browser.
You can also block or delete cookies entirely through your browser's privacy settings. If you do that, parts of the site that depend on necessary cookies (sign-in state, session continuity) will not work.
Third parties
Google (Tag Manager, Analytics and Ads) receives usage data only after you consent, and only for the categories you accept. Cloudflare provides bot management and may set the __cf_bm cookie automatically as part of that service. Both are bound by their own terms and privacy policies, listed in our Privacy Policy.
Compliance
Under the EU ePrivacy Directive (Cookie Law) and GDPR Article 6, cookies that are strictly necessary to deliver the service you requested do not require consent. Analytics and marketing cookies do, so Google tags stay off until you accept them, and rejecting is as easy as accepting.
Contact
Questions about this policy go through our Contact page. For details about data processing more broadly, see our Privacy Policy.