Skip to main content
SHIFT/CTRL
COOKIE POLICY · LEGALDOC IDCKE-2026.05.12

Cookie policy.

Which cookies the site uses and how to switch them off at the browser level. Aggregated, IP-truncated traffic measurement only. No advertising profile, no cross-site tracking, no session replay.

Effective
2026-05-12
Issued by
ShiftCTRL · Engineering firm · NYC
Governing law
State of New York
§ 1

What cookies are

A cookie is a small text file a site sets on your device to remember a piece of state across page loads — a session token, a preference, a measurement identifier. Similar mechanisms (localStorage, sessionStorage) are used in the same way by modern web apps. We use the word cookie to mean both for the rest of this document.

We use a small number of them. None build an advertising profile. None are used for cross-site tracking. The full list, by category, is in § 2.

§ 2

Categories we use

The site groups cookies into three categories. All three are set by default, including aggregated, IP-truncated traffic measurement. We do not run advertising cookies, we do not build a profile across other sites, and we do not run session replay. Browser-level opt-out controls for each category are in § 4.

Essential

Set by default

Required for the site to function — edge security, request routing, basic UX state. The site does not work without them.

  • cf_clearance (Cloudflare)
  • theme preference
Up to 1 yearOpt out via browser settings

Analytics

Set by default

Anonymized traffic measurement. Tells us which pages engineers find useful so we can spend our time on the parts that matter. IP is truncated, advertising signals are disabled at the tag level, no profile is built across other sites.

  • _ga (Google Analytics 4)
  • _ga_<container-id>
Up to 2 yearsOpt out via browser settings

Functional

Set by default

Remembers small preferences set during a visit — calculator inputs, dismissed prompts, the chosen theme. None of these are shared with third parties.

  • tool input state
  • last-used calculator settings
Session or up to 1 yearOpt out via browser settings
§ 3

Third-party services

The cookies set on the site come from us and from a small number of third-party services we use to run the site safely and to understand which pages are useful.

Service
Purpose
Opt-out
Cloudflare
Edge security, DDoS protection, and content delivery. Sets a security clearance cookie that is required for the site to function. Privacy notice →
Cannot opt out — essential.
Google Analytics 4
Aggregated, IP-truncated traffic measurement. Advertising signals are disabled at the tag level — GA4 receives only first-party page and event data, never an advertising identifier. Privacy notice → · Browser opt-out add-on →
Install the Google opt-out add-on, or block third-party cookies in your browser.
Stripe
Payment processing for the /pay route. Stripe sets cookies on the checkout flow for fraud prevention; these only run when you actively pay an invoice. Privacy notice →
Do not pay through the site to avoid setting Stripe cookies.

We do not run advertising-network cookies (Google Ads, Meta Pixel, LinkedIn Insight, or equivalent). We do not run session-replay tools (FullStory, Hotjar, or equivalent).

§ 4

Opting out

Opt out at the browser level. The steps for the major browsers are in § 5. Browser controls block all cookies on the site at once — analytics and functional both — and the site keeps working without them. Calculator state, theme preference, and similar per-device niceties will reset on each visit.

You can also install the Google Analytics opt-out browser add-on to disable analytics on every site that uses GA4, without touching anything else.

§ 5

Browser controls

Every modern browser exposes cookie controls under its privacy or site-permissions menu. The exact path varies by version — the entries below are stable enough to find the right screen.

Chrome
Settings → Privacy and security → Third-party cookies (or Cookies and other site data).
Firefox
Settings → Privacy & Security → Cookies and Site Data.
Safari
Settings → Privacy → Manage Website Data, or Block all cookies.
Edge
Settings → Cookies and site permissions → Manage and delete cookies and site data.

Browsers also support Do Not Track and the newer Global Privacy Control signals. We honor a Global Privacy Control signal as a request to opt out of analytics and functional cookies on this device.

§ 6

Updates to this policy

We update this policy when the cookies we use change. The effective date at the top of this page is the date of the current version. Material changes are summarized in a brief change log on first publication.