Cookies & Browser Storage
Cookies and similar technologies support sign-in, preferences, attribution and advertising. This notice describes the public site updated on 15 October 2026; storage can vary with sign-in, region, browser and provider behaviour.
Authentication and security
Clerk loads when you open sign-in or use the authenticated member area. It uses cookies and browser storage to maintain and synchronise authentication. Earlier sign-in checks observed __client on clerk.eternalpilgrim.app and __client_uat variants on eternalpilgrim.app, with expiry approximately one year later, plus __clerk_environment in local storage. Signed-in sessions can also use __session variants. Names, renewal and lifetimes are managed by Clerk and can vary.
Cloudflare security cookies observed on the Clerk domain include __cf_bm, with a 30-minute expiry, and the session cookie _cfuvid. These support bot protection and request security, separately from advertising. Essential sign-in and security storage is assessed by its actual purpose.
The ep_preview cookie supports password-gated environments and lasts 12 hours. The canonical public site is open and does not require this private-preview access cookie.
Language and attribution
The eternal-pilgrim-language local-storage entry remembers the language selected or opened through a language query. It has no automatic expiry in this implementation and remains until replaced or cleared. The service worker does not cache private pages or API responses or implement a separate analytics store.
A valid invitation link can set ep_ref for up to one year to attribute a later signup. An active Community Builder link can set ep_partner for 30 days to attribute registration or later program activity. Both are Secure, HttpOnly, SameSite=Lax cookies. These are attribution storage, not authentication cookies; their lifetime does not define retention of resulting database records.
Current link handlers set attribution cookies without a separate site consent choice. Whether each qualifies for an exemption as strictly necessary to a service explicitly requested by the visitor needs a purpose-specific legal assessment. First-party status alone does not create an exemption.
Statistics and performance
Application product metrics are recorded on the server against account identifiers without a dedicated analytics cookie. They are separate from Cloudflare Web Analytics, whose beacon was observed loading from static.cloudflareinsights.com on the public site.
Cloudflare describes Web Analytics as collecting page/performance metrics without analytics cookies or local storage. This does not mean all site processing is anonymous or that security cookies, advertising storage and account-linked product events disappear. Privacy explains their different purposes.
Advertising actually loaded
Public pages identify the AdSense publisher account for review without loading its advertising script or requesting Google/DoubleClick advertising cookies. Advertising technologies may only be activated with the appropriate regional consent controls and updated disclosures.
Locally hosted promotional images may appear in the member area and have no separate advertising script. Clicking a promotion visits an external advertiser. Rewarded advertising and payment collection remain disabled.
Consent and available controls
Where applicable cookie rules require consent for non-essential advertising or other browser storage, consent must precede storage or access and allow a meaningful choice and withdrawal. Necessary technologies have a limited exemption; visiting the site or reading this notice is not consent.
The site has no certified advertising consent platform or cookie preference centre. Automatic Google advertising-script loading has therefore been removed. Reading this notice or visiting the site is not consent. Advertising activation requires a suitable consent implementation.
Your browser can block or clear cookies and site data, including third-party cookies. Clearing authentication may sign you out; clearing preferences resets language and clearing attribution may affect referral attribution. Browser controls do not undo data already sent or records created, and are not a site-level consent mechanism.
Provider notices and outstanding details
The provider links below explain technologies and privacy practices. Operator identity and legal contact, a complete region-specific cookie inventory and the appropriate consent implementation remain to be confirmed. This page does not promise a working Eternal Pilgrim preference button, consent record or advertising opt-out.