What cookies are
A cookie is a tiny text file your browser stores when you visit a website. The next time you come back, the browser hands the cookie back to the site — so the site can remember things like "this person is logged in" or "this person prefers dark mode."
Cookies are not programs. They cannot run on your computer or read other files. They can, however, be used to track your activity across sites — which is why some are regulated under laws like the EU ePrivacy Directive and the California Consumer Privacy Act.
Cookies we use
We use four cookies, total. None of them are third-party tracking cookies.
| Name | Purpose | Lifetime | Optional? |
|---|---|---|---|
| lwo_session | Keeps you signed in if you have an account | Session (deleted when you close the browser) | No (strictly necessary) |
| lwo_consent | Remembers your cookie banner choice | 12 months | No (strictly necessary) |
| lwo_prefs | Remembers display preferences (palette, layout, currency) | 12 months | Functional — opt-in |
| lwo_ref | Records which page sent you to a merchant, so we get credit for the referral | 30 days | Performance — opt-in |
We do not use Google Analytics, Facebook Pixel, advertising trackers, or fingerprinting libraries.
How to control them
When you first visit the site, you’ll see a banner with three buttons: Accept, Reject, and Customize. Your choice is saved in lwo_consent and respected on every page until it expires. You can change your mind any time by visiting the cookie settings panel or clearing your browser cookies for our domain.
You can also disable cookies entirely in your browser settings — though the site may not work correctly without strictly-necessary cookies. We do not show ads, so you will not see ad-personalization break.
Things that are like cookies but aren’t
Beyond cookies, we use localStorage for a few small UI niceties — remembering whether you’ve dismissed a banner, your category sort order, and your tweak preferences. localStorage is first-party, never leaves your browser, and is cleared when you clear site data.
We do not use Flash cookies (LSOs), HTML5 indexedDB for tracking, ETags, browser fingerprinting, or web beacons in email.
Do Not Track and Global Privacy Control
Modern browsers can send a "Do Not Track" or "Global Privacy Control" signal with every request. When we detect either signal, we automatically apply the equivalent of clicking "Reject" — only strictly-necessary cookies are set, and you won’t see the consent banner.
Changes to this policy
If we add a new cookie or change the purpose of an existing one, we will update this page and re-prompt you for consent the next time you visit. We will never silently expand a cookie’s purpose.
Cookies misbehaving?
If a setting won’t stick or a banner won’t go away, drop us a note. We’ll fix it on our end.