Cookies policy.
What cookies are
Cookies are small files a site stores in your browser. Some are essential for the site to function; others are optional and only run with your consent. We group ours into three buckets: strictly-necessary (always on), functional (security tokens on public forms), and analytics (consent-gated).
Cookies we set
The complete list. We'll update this table when it changes.
| Cookie | Type | Purpose | Vendor | Expiry |
|---|---|---|---|---|
| Session cookie (HTTP-only) | Strictly necessary | Keeps you signed in and secures your session. Required for the app — can't be turned off. | Verdscore | Expires when your session ends |
| cf_chl_* | Functional | Cloudflare Turnstile bot-protection token on public forms (signup, contact, paste-URL). Not used for tracking. | Cloudflare | Short-lived (per form submission) |
| _ga, _ga_* | Analytics | Google Analytics 4 (Consent Mode v2) — counts visitors and which pages they read. Loads only after you accept the banner. | Up to 2 years (Google default) |
Strictly-necessary cookie
Our session and authentication cookie is HTTP-only, Secure, and SameSite=Lax. It signs you in and keeps your session secure. Without it, the app can't tell who you are — so it can't be turned off while you use Verdscore.
Bot protection (functional)
Public forms (signup, contact, paste-URL) use Cloudflare Turnstile to keep bots out. It may set a short-lived functional token to verify a submission is genuine. It isn't used for tracking, advertising, or building a profile of you.
Optional analytics
We use Google Analytics 4 via Consent Mode v2 to understand how the product is used. It only loads after you accept analytics on the cookie banner. If you decline, GA never loads — no requests to Google at all. You can change your choice anytime by clearing the site's storage; the banner will appear again on your next visit.
No advertising cookies
We don't set advertising, retargeting, or cross-site tracking cookies. We don't sell your data. There are no Meta Pixel, no TikTok pixel, no LinkedIn Insight Tag on this site.
How to control cookies
Use the cookie banner to accept or decline analytics, and to change that choice later. You can also block or clear cookies in your browser settings — note that blocking the strictly-necessary session cookie will sign you out and prevent sign-in.
Changes
When we add or remove a cookie we update this table and bump the date at the top. For questions, send us a message.