# Cookie Policy

<!-- machine twin: /api/legal/cookie-policy?format=md -->
<!-- version: 4a548f6c70c5 -->
# Cookie Policy

Last updated: 15 September 2026

This policy lists the cookies and browser storage entries used on https://dejabars.com, what each one
does, and how long it lasts. It forms part of the [Privacy Policy](/docs/privacy-policy).

## 1. Strictly necessary

These are required for the Service to work. They are set when you use it and cannot be switched
off without breaking sign-in and security.

| Name | Purpose | Lifetime |
|---|---|---|
| `tc_jwt` | Signed, http-only session token that keeps you signed in | 7 days |
| `tc_csrf` | CSRF token that protects write requests against cross-site forgery | 7 days |
| `tc_cookie_consent` | Stores your cookie choices so we can honour them | 12 months |
| Cloudflare Turnstile cookies | Bot protection during registration, login and search | Session / short-lived |

## 2. Analytics — only after consent

| Name | Purpose | Lifetime |
|---|---|---|
| Google Analytics (`_ga`, `_ga_*`) | Aggregate statistics: which pages and features are used | Up to 24 months |

Google Analytics is loaded with consent mode defaulting to denied. No analytics cookie is set and
nothing is sent to Google until you accept analytics in the consent banner. Declining changes
nothing about your ability to use the Service.

## 3. Local browser storage

| Key | Purpose | Lifetime |
|---|---|---|
| `tc-recent-patterns` | The patterns you recently opened, so they are one click away | Until you clear it |
| `tc_cookie_consent` | Keeps your cookie choices on this device | 12 months |

Local storage entries never leave your browser and are not readable by us.

## 4. What we do not use

No advertising or marketing cookies, no cross-site trackers, no social media pixels.

## 5. Changing your choice

Use the cookie banner or the "Cookie settings" control in the footer to change or withdraw
consent at any time. Withdrawing consent stops analytics immediately; the necessary cookies stay
because sign-in cannot work without them.

## 6. Contact

Questions about cookies or consent: privacy@dejabars.com