Legal · Updated 27 October 2026
Cookie Policy
Effective date: 27 October 2026
This policy explains the cookies and similar technologies (such as browser local storage and tracking pixels) used on https://alteredlabs.net (the “Site”). It is part of our Privacy Policy.
The Site is run by Altered Labs (“we”, “us”).
1. What cookies are
Cookies are small text files a website stores in your browser. Local storage is similar, but the data stays in your browser and is not sent with every request. Pixels and tags are small pieces of code that send information to a service such as Google or Meta. In this policy, “cookies” means all of these.
2. Our approach
- We use one strictly necessary local storage item of our own. It does not track you.
- Analytics and advertising cookies are off until you opt in if you are in the EU, EEA, UK or Switzerland. We use Google Consent Mode v2. Before you consent, Google Analytics, Google Ads and the Meta Pixel do not load, and they set no cookies.
- In other regions, we may enable analytics and advertising by default. You can turn them off at any time. In the US, we honour the Global Privacy Control (GPC) signal as an opt-out of “sale” and “sharing”.
- Our security provider (Cloudflare) and our checkout provider (Lemon Squeezy) may set strictly necessary cookies. These do not need consent.
3. Categories
- Strictly necessary: needed for the Site, cart, checkout or security to work. Always on.
- Analytics: help us understand how visitors use the Site. Only with consent.
- Advertising: measure our ads and let us show ads to people who visited the Site. Only with consent.
4. List of cookies and storage items
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
al (local storage) |
Altered Labs (alteredlabs.net) | Stores your theme (dark/light), cart contents and cookie consent choices | Until you clear it; we ask for consent again after 12 months | Strictly necessary |
al_session |
Altered Labs (alteredlabs.net) | Keeps you signed in to your account. Set only when you sign in, sent only to our account service (/api) |
30 days, or until you sign out | Strictly necessary |
__cf_bm |
Cloudflare | Tells humans and bots apart to protect the Site (only if bot protection is active) | 30 minutes | Strictly necessary |
cf_clearance |
Cloudflare | Records that you passed a security challenge (only if a challenge is shown) | 30 minutes to 1 year, depending on security settings | Strictly necessary |
_cfuvid |
Cloudflare | Applies rate limits fairly to visitors who share an IP address (only if rate limiting is active) | Session | Strictly necessary |
| Lemon Squeezy checkout cookies | Lemon Squeezy (lemonsqueezy.com) | Run the checkout window, keep your checkout session and prevent fraud. Set only when you open checkout | Session to 1 year | Strictly necessary |
__stripe_mid |
Stripe, payment processor for Lemon Squeezy (stripe.com) | Fraud prevention during checkout | 1 year | Strictly necessary |
__stripe_sid |
Stripe, payment processor for Lemon Squeezy (stripe.com) | Fraud prevention during checkout | 30 minutes | Strictly necessary |
_ga |
Google Analytics 4 | Tells visitors apart to count visits and usage | 2 years | Analytics |
_ga_<ID> |
Google Analytics 4 | Keeps the state of your session | 2 years | Analytics |
_gcl_au |
Google Ads | Measures conversions from ads | 90 days | Advertising |
_gcl_aw |
Google Ads | Stores the ad click that brought you to the Site, to measure conversions | 90 days | Advertising |
IDE, test_cookie |
Google (doubleclick.net) | Ad measurement and remarketing; test_cookie checks whether cookies are allowed |
IDE: 13 months; test_cookie: 15 minutes |
Advertising |
_fbp |
Meta (Meta Pixel) | Tells browsers apart to measure ads and build ad audiences | 90 days | Advertising |
_fbc |
Meta (Meta Pixel) | Stores the Facebook/Instagram ad click (fbclid) that brought you to the Site |
90 days | Advertising |
fr |
Meta (facebook.com) | Ad delivery and measurement, if you use Facebook or Instagram | 90 days | Advertising |
Third-party providers may change the names or durations of their cookies. We review this list regularly. For details, see the Google Privacy Policy, How Google uses information from sites that use its services, the Meta Privacy Policy, the Cloudflare cookie documentation, the Lemon Squeezy Privacy Policy and the Stripe cookie policy.
5. Server-side events
If you consent to analytics and advertising, we may also send purchase and sign-up events from our server to Meta (Conversions API) and Google (GA4 Measurement Protocol). These use the cookie IDs above and hashed identifiers. We send them only if you consented. See section 2.6 of our Privacy Policy.
6. Newsletter emails
Our newsletters contain no tracking images and no tracked links. We don’t know whether you open them.
7. How to change your choices
- On the Site: click “Cookie settings” in the footer at any time to accept, reject or change your choices. Withdrawing consent is as easy as giving it.
- US visitors: click “Do Not Sell or Share My Personal Information” in the footer, or turn on Global Privacy Control in your browser.
- In your browser: you can block or delete cookies in your browser settings. If you block strictly necessary storage, your theme, cart or consent choices may not be saved.
- Other tools: Google Analytics opt-out add-on, Google My Ad Center, and your Meta ad preferences.
When you withdraw consent, we stop setting analytics and advertising cookies. Cookies already set stay in your browser until they expire or you delete them, but we stop using them.
8. Changes
If we add a new cookie or change how we use one, we update this policy and, where needed, ask for your consent again.
9. Contact
Questions about cookies: [email protected]