Cookies and browser storage
PDFLP uses a small set of browser storage for login sessions, abuse prevention and anonymous event deduplication. This page describes the current categories without treating every storage item as a marketing cookie.
By PDFLP · Last updated
On this page5 sections+
Essential authentication
The `pdflp_session` cookie stores an HttpOnly session token for a verified account. It is required for the dashboard and expires after the configured session period or when the user signs out.
This cookie is not available to client-side JavaScript.
Turnstile
Cloudflare Turnstile protects public forms. Cloudflare may set security-related cookies or browser storage on the challenge domain to run and remember the verification result.
Turnstile processing is governed by Cloudflare's applicable privacy terms.
Anonymous event session
Public landing pages can store a random identifier in browser local storage so events from the same browser session can be deduplicated and reading depth can be measured.
The identifier is not a lead record and does not contain the form email.
Analytics
PDFLP currently uses first-party event endpoints for landing-page analytics. Cloudflare may provide aggregate infrastructure analytics. No advertising or cross-site tracking pixel is intentionally installed.
If a new third-party analytics or advertising tool is added, this page and the consent approach must be updated.
Your controls
- Signing out invalidates the server session.
- Clearing site data removes the local event identifier.
- Private-browser windows remove storage when the session closes.
- Blocking Turnstile may prevent protected forms from being submitted.