This Policy explains how ("we", "us") uses cookies and similar tracking technology on lootport.org. It works alongside our Privacy Policy and reflects the requirements of PECR and the UK GDPR. Continuing to browse after setting your preferences means you've accepted the choices you made.
1. MANAGING YOUR CONSENT
a) On your first visit, a banner lets you accept all non-essential cookies, decline them, or pick your preferences by category.
b) Strictly necessary cookies run regardless of your choice, since they support core security, session handling, and payment compliance.
c) You can change or withdraw consent at any time via the Cookie Preferences link in our footer, or through your browser settings.
d) Withdrawing consent doesn't affect processing that already happened lawfully, and doesn't switch off cookies required by law or contract.
2. WHAT A COOKIE IS
a) A cookie is a small text file a website places on your device. It lets the site recognise you on return visits, remember preferences, and gather usage data.
b) Session cookies disappear automatically once you close your browser.
c) Persistent cookies stay on your device until they expire or you delete them.
d) First-party cookies come from the Site directly; third-party cookies are set by outside services like analytics or payment tools.
e) Some cookies exist purely to satisfy obligations from our payment partners, card networks, and financial regulators, particularly around fraud prevention and AML/KYC.
3. COOKIE CATEGORIES
a) Strictly Necessary — always on, can't be disabled, since checkout and account security depend on them.
b) Preference — remembers choices you've made; runs only with consent.
c) Analytics — tools like Google Analytics gathering aggregated usage data; runs only with consent.
d) Marketing — measures campaign performance and tailors ads; runs only with consent.
4. THIRD-PARTY COOKIES
Fraud-detection firms, analytics providers, card schemes, and banks may each place their own cookies through our site, and some can track activity beyond lootport.org. A subset exist purely to support compliance checks and stay off by default until you consent through our preferences tool.
Strictly necessary cookies rest on our legitimate interests; every other category depends on your explicit consent, in line with PECR and the UK GDPR. Google Analytics processes data on our behalf under a UK GDPR-compliant agreement, with IP addresses anonymised before transmission. Google LLC, as operator, may process this data outside the UK/EEA under Standard Contractual Clauses — see policies.google.com/privacy for details.
5. FULL COOKIE REFERENCE TABLE
Here's every cookie currently active on the Site:
| Category | Name | Set By | Function | Duration |
|---|---|---|---|---|
| Strictly Necessary | session_id | Keeps your session active while you browse. | Session | |
| Strictly Necessary | csrf_token | Protects against cross-site request forgery. | Session | |
| Strictly Necessary | steam_auth | Verifies your Steam account login. | Session | |
| Strictly Necessary | cookie_consent | Remembers your cookie preferences. | 1 year | |
| Analytics | _ga | Google Analytics | Assigns an ID to measure site traffic. | 2 years |
| Analytics | _ga_* | Google Analytics | Keeps track of your GA4 session state. | 2 years |
| Analytics | _gid | Google Analytics | Logs daily visitor statistics. | 24 hours |
| Analytics | _gat | Google Analytics | Limits the rate of analytics requests. | 1 minute |
| Functional | lang_pref | Remembers your language and region. | 1 year | |
| Functional | ui_settings | Stores your display preferences. | 1 year | |
| Marketing | None active | — | No marketing cookies are currently in use. | — |
Google occasionally updates its own cookie names — current details are always at policies.google.com.
6. BROWSER-LEVEL CONTROLS
a) Every major browser lets you view, block, or delete cookies — check your browser's own help pages for instructions.
b) Blocking strictly necessary cookies will break checkout and order processing.
c) To stop Google Analytics tracking your visits altogether, install the opt-out add-on at tools.google.com/dlpage/gaoptout.
7. YOUR RIGHTS
You can ask what cookie-derived data we hold, request its deletion (subject to our compliance obligations), or lodge a complaint with the ICO if something seems off. Cookies tied to AML checks and fraud prevention may keep running even after a deletion request, since they support a legal obligation rather than a discretionary one.
8. UPDATES & CONTACT
This Policy is reviewed periodically — check back for the latest effective date at the top. For anything cookie-related, reach us at info@lootport.org.