Legal
Cookie Policy
Last updated: 29 August 2026 · Effective: 29 August 2026 · Applies to: endorphynweb.com
This policy explains what is stored in your browser when you visit endorphynweb.com. Read it alongside our Privacy Policy. Everything listed here is genuinely in use on this site. Nothing is listed speculatively.
1. What cookies and browser storage are
A cookie is a small text file a site stores on your device and sends back to the server with each request. localStorage is a related browser feature that keeps a value on your device but, unlike a cookie, is never transmitted automatically. We use localStorage for preferences and set no cookies ourselves.
2. Stored by us on your device
Both entries below are localStorage keys, not cookies. Neither is transmitted to us, neither identifies you, and both are removed when you clear your browser storage for this site.
| Key | Type | Category | Purpose | Duration |
|---|---|---|---|---|
ew_currency | localStorage | Functional preference | Remembers which currency you chose with the toggle in the footer, so prices stay in your currency as you move between pages. | Until you clear browser storage |
ew_country_auto | localStorage | Functional preference | Caches the two-letter country code returned once by our /api/geo endpoint, so we can default prices to the likely currency without asking the network again on every page. | Until you clear browser storage |
3. Cookies set by Cloudflare
This site is hosted on Cloudflare, and our forms use Cloudflare Turnstile to tell a person apart from a bot. Cloudflare may set strictly necessary cookies as part of delivering and protecting the site, both on our domain and on challenges.cloudflare.com, which serves the Turnstile widget.
| Cookie | Set by | Category | Purpose | Duration |
|---|---|---|---|---|
__cf_bm | Cloudflare | Strictly necessary | Bot management. Distinguishes automated traffic from human visitors so the site stays available and forms stay usable. It cannot be used to identify you or to track you across other sites. | 30 minutes |
cf_clearance | Cloudflare | Strictly necessary | Records that a security challenge has been passed, so you are not challenged repeatedly. Set only when a challenge is actually served to you. | Up to 30 minutes, per Cloudflare's configuration |
| Turnstile challenge storage | Cloudflare, on challenges.cloudflare.com | Strictly necessary | Holds the state of a single anti-spam check while you complete a form. Cloudflare states that Turnstile does not use this to track users across sites or to build advertising profiles. | Single check, then discarded |
These are exempt from consent requirements because they are strictly necessary to provide a service you have asked for. Cloudflare's own cookie documentation is the authoritative description of what it sets and when. Blocking them may prevent forms from submitting.
4. What we do not use
Stated plainly, because most sites of this kind do use them:
- No analytics. No Google Analytics, no Google Tag Manager, no page-view or event measurement of any kind.
- No advertising or retargeting. No Meta Pixel, no Google Ads tags, no conversion pixels, no remarketing lists.
- No session recording or heatmaps. No Microsoft Clarity, no Hotjar, no equivalent.
- No third-party fonts. Typefaces are bundled and served from our own domain, so no request goes to a font provider and no cookie is set by one.
- No social media embeds or share widgets. Links to our social profiles are ordinary links that set nothing until you click them.
- No cross-site identifiers, fingerprinting, or data brokering.
5. Why there is no consent banner
Under the EU and UK ePrivacy rules, consent is required before storing anything on your device that is not strictly necessary to deliver a service you asked for, or expressly requested by you. The two values in section 2 do not arrive the same way, so they are described separately.
ew_currency is written only when you use the currency toggle in the footer. It records the choice you just made, so it is stored because you expressly requested it. Until you use the toggle, it is not written at all.
ew_country_auto is written automatically the first time you load a page, before you have done anything. It caches the two-letter country code our /api/geo endpoint returns. You did not ask for it, so it does not rest on your request. It rests on being needed to show prices in a currency that makes sense for you without a network call on every page. It holds a country code and nothing else, it is never sent to us, it does not identify you, and it is not used for analytics, advertising, profiling, or tracking of any kind.
The Cloudflare cookies in section 3 are strictly necessary to deliver and protect the site.
On that basis we do not show a consent banner. We would rather set out the reasoning than claim more than we can: ew_country_auto is the one value written without any action from you, and a regulator could reasonably treat caching it as a convenience rather than a necessity. If that view were taken, that single value is what a banner would be needed for. Nothing else here would need one, because nothing here does analytics, advertising, or cross-site tracking.
If we later add an analytics or advertising tool, we will update this policy and the Privacy Policy before it goes live, and visitors in the EU, the UK, and the EEA will be asked for consent before anything non-essential is stored.
6. Managing what is stored
- Clear the preferences: clear site data for endorphynweb.com in your browser settings, or delete the
ew_currencyandew_country_autokeys from localStorage in your browser's developer tools. The site keeps working; it simply forgets your currency choice. - Change your currency instead of clearing it: use the currency toggle in the footer. It overwrites the stored value directly.
- Block cookies generally: every major browser lets you block or delete cookies per site. Blocking the strictly necessary Cloudflare cookies in section 3 may stop forms from submitting.
7. Other services, only when you choose them
Some things happen only because you acted. If you click through to WhatsApp, Facebook, Instagram, or LinkedIn from our footer, that platform's own cookies and policies apply from the moment you land there, not before. If you join a booked call, Google Meet or Zoom applies its own cookies on its own domain. None of these run on endorphynweb.com, and we have no control over, or visibility into, what they store.
8. Contact
Questions about this policy: get@endorphynweb.com · Privacy requests and grievances: shivansh@endorphynweb.com