Cookies and storage

On 1 November 2026 the live address https://deaftruth.com was checked in a fresh, signed-out browser. Each cookie below was set on the first page load, before any interaction and before any choice was offered.

• session-id. Set by the Lovable visit statistics script on this domain. Lasts 30 minutes and holds a randomly generated visit identifier. It is sent with statistics requests described in the privacy notice.
• __dpl. Set by the hosting service on each page. Lasts 24 hours and is renewed on every page load. Its purpose has not been confirmed by the provider, so it is not described here as essential.
• __cf_bm. Set by Cloudflare, which serves the site, for bot protection. Lasts 30 minutes and cannot be read by page scripts.

Lovable's analytics documentation says its visit statistics set no cookies. The check found otherwise: the session-id cookie was set. Earlier wording on this page repeated the provider statement and has been corrected.

A second script added by the hosting platform sends page view, session start, engagement and page performance events. Its session identifier was held in memory only; no cookie or browser storage write by this script was observed. It ran separately from the visit statistics.

No local storage, session storage, IndexedDB database, service worker or cache storage was observed on the pages checked. The site itself sets no cookie of its own. Temporary interface state stays in memory for the current page. The contact page does not capture email drafts.

Every request observed went to this site's own domain. That does not mean there is no tracking: the visit statistics and platform telemetry above are sent to addresses on this domain and are collected by the hosting provider.

• Fonts and images. Served from this site's own files, not a font or image provider.
• Video. No video is published yet. Any YouTube or Vimeo film is an outbound link, clearly labelled as leaving this site. No external player or remote thumbnail loads here.
• Email updates. The signup form sends the address and consent directly to Buttondown only when it is submitted. Open and click measurement is switched off in the Buttondown settings. Details are in the privacy notice.
• Links. Links to other sites, such as DeafMetrix, take the reader to that site and its own cookie practices.

No effective reader opt-out is available on the current hosting. The platform provides no consent control, and the visit statistics did not respond to the Global Privacy Control browser signal in the check. Replacement hosting is being prepared so that these platform scripts and cookies are no longer added.

Browser settings can block or delete cookies, including session-id. Blocking does not stop requests or the in-memory platform telemetry, and its effect on the site has not been tested. Privacy questions and objections go to hello@deafmetrix.com. An email is not an automatic opt-out.

Describing these cookies here does not by itself meet any consent requirement, and no legal clearance is claimed.

The check used headless Chromium 147 in fresh, signed-out sessions on 1 November 2026, from one location, across the home, Truths, Privacy, Cookies, Contact, Share and Email updates pages, with page links, reload and new sessions. No form was submitted. Other browsers, devices, locations and later platform changes were not tested. Server logs and provider retention cannot be observed from a browser.

Draft versions of the site viewed inside the Lovable editor or on a preview address may carry the editor's own storage and sign-in cookies. Those belong to the editing tool and are not part of the live site check.