TTSWP uses cookies sparingly and gives you control. Necessary cookies keep the site running and are always on. Analytics and marketing cookies stay off until you opt in through the cookie banner.
1. Categories
We group cookies into three categories. The first is always on. The other two are off by default and only switch on after you click Accept or save preferences in the customize panel of the cookie banner.
2. Necessary cookies (always on)
These keep the site working: session continuity, CSRF protection, cross-domain auth bridge with our app at app.ttswp.com, and recording your cookie choice itself. Under EU ePrivacy Directive and GDPR Article 6, these do not require consent because they are strictly necessary to deliver the service you asked for.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| laravel_session | Identifies your browser session so the site remembers you between page loads | ttswp.com | 2 hours of inactivity |
| XSRF-TOKEN | Cross-site request forgery protection on form submissions | ttswp.com | Session |
| tts_auth | Tells ttswp.com that you are signed in to app.ttswp.com so the navigation shows Dashboard instead of Sign In. HMAC-signed payload with no session token. | .ttswp.com | Set by app.ttswp.com (typically tied to your sign-in session length) |
| tts_consent | Stores your cookie consent choice so we don't ask again | .ttswp.com | 12 months |
| __cf_bm | Cloudflare bot management - blocks automated traffic and credential-stuffing. Set automatically by Cloudflare when Bot Fight Mode is enabled. | .ttswp.com | 30 minutes |
3. Analytics cookies (gated by your consent)
We use Google Analytics 4 to understand which pages people read, which features they care about, and where the site needs work. Loaded first-party through the Cloudflare Google Tag Gateway, so they appear under the ttswp.com domain rather than google-analytics.com.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| _ga | Google Analytics 4 client identifier | ttswp.com | 2 years |
| _ga_LF0SM4BR4X | Google Analytics 4 session state, tied to property G-LF0SM4BR4X | ttswp.com | 2 years |
4. Marketing cookies (gated by your consent)
We use Google Ads conversion tracking to measure which ads bring useful visitors and to support remarketing audiences. Same first-party Tag Gateway delivery as analytics.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| _gcl_au | Google Ads conversion linker - matches site visits to ad clicks | ttswp.com | 90 days |
| _gcl_aw | Google Ads click identifier when arriving from a paid Google ad | ttswp.com | 90 days |
5. Browser storage transparency
The blog audio player uses the browser's sessionStorage (not cookies) to remember if you dismissed the sticky audio player on a given post. Keys look like ttswp.audio.dismissed.{post-slug}. SessionStorage clears when the tab closes. No tracking, no cross-page persistence beyond the current tab.
6. How to change your choice
Click "Cookie settings" in the footer of any page to reopen the consent banner. You can change analytics and marketing on or off at any time. Your new choice takes effect immediately for tags loaded after the change. Existing analytics or marketing cookies set under a previous Accept can be cleared through your browser's site settings if you want to start fresh.
You can also block or delete cookies entirely through your browser's privacy settings. If you do that, parts of the site that depend on necessary cookies (sign-in state, session continuity) will not work.
7. Third parties
Google Analytics 4 and Google Ads receive measurement data when you grant consent. They are bound by their own terms and privacy policies, listed in our Privacy Policy. Cloudflare provides bot management and the Google Tag Gateway, and may set the __cf_bm cookie automatically as part of that service.
8. Compliance
Under the EU ePrivacy Directive (Cookie Law) and GDPR Article 6, we obtain explicit consent before storing or accessing non-essential cookies. Necessary cookies are exempt because they are strictly required to deliver the service you requested. Our consent banner records your choice in the tts_consent cookie itself - the cookie is the record, and you can change it any time through the footer link.
9. Contact
Questions about this policy go through our Contact page. For details about data processing more broadly, see our Privacy Policy.