Cookie Policy

1. What this covers

This explains the cookies and browser storage subsforless.co uses. The short version: only what the site needs to function, plus remembered preferences. No advertising trackers, no cross-site profiling.

2. Strictly necessary

• Session cookie (subsforless-session): keeps you signed in and your cart working during a visit. Expires after 2 hours of inactivity.
• Security token (XSRF-TOKEN): protects forms against cross-site request forgery.

3. Preferences

• Theme (sfl-mode, local storage): set only if you pick a theme yourself. Without it the site is dark.

4. What we do not use

No third-party advertising cookies, no social media pixels, no fingerprinting. If we ever add analytics, it will be privacy-respecting and this page will say so first.

5. Managing cookies

You can clear or block cookies in your browser settings. Blocking the strictly necessary ones will break sign-in and checkout.