Cookie Policy

Wall of Forever uses only essential cookies that are strictly necessary for the service to function. We do not use any analytics, tracking, or advertising cookies.

For operator details, see our Imprint.

What Cookies We Use

Authentication cookie (httpOnly) — A secure, httpOnly cookie containing your session token (JWT). This cookie is set when you sign in and is required to keep you logged in. It cannot be accessed by JavaScript and is only sent over secure connections.

Security cookie (CSRF token) — A cookie holding an anti-CSRF token used to verify that requests originate from the Service and to protect against cross-site request forgery. It is strictly necessary for secure operation.

Crowd-seal reaction cookie (httpOnly) — Set only when you react to a crowd-sealed brick without signing in. It holds a random identifier, nothing else, so that your reaction is counted once and the brick knows you have already added yours. It lasts one year and is strictly necessary for the reaction you asked to make.

Cloudflare Turnstile (bot check) — Where enabled, the check that runs before an anonymous crowd-seal reaction or reminder request may store data in your browser strictly to tell people from bots. It is governed by Cloudflare’s own privacy policy and is not used for advertising or tracking.

Lemon Squeezy (payment processing) — When you make a purchase, Lemon Squeezy may set cookies necessary for fraud prevention and payment processing. These are governed by Lemon Squeezy's own cookie and privacy policy.

Local Storage

In addition to cookies, we store a small amount of data in your browser's local storage:

• Session data — your display name and a list of bricks you own, so the wall can highlight them without re-fetching. Removed when you log out.

• Referral code — if you arrive via a partner's referral link, the partner's code is kept for up to 30 days and read once if you make a purchase, so we can credit the partner who introduced you. It is first-party only, is never shared with third parties, and is not used for advertising or cross-site tracking.

• Unfinished brick — if you write a brick before choosing its spot on the wall, your words, photo and choices (including a seal you picked, and the page you started it on) are kept in your browser (IndexedDB) so you can come back to them. They are not sent to us until you place the brick, are deleted once it is bought, and expire after 7 days.

• Checkout in progress — while you pay on Lemon Squeezy’s page, the brick you are buying (and, for a private brick, its key) waits in this browser tab’s session storage so the purchase can be completed — and counted in our visit statistics — when you come back. It is removed as soon as you return, and never outlives the tab.

What We Do Not Use

• No analytics cookies (no Google Analytics, no tracking pixels). We count visits without any cookie and without storing anything on your device — see the Privacy Policy.

• No advertising or remarketing cookies

• No third-party social media tracking cookies

• No cookie consent banner is needed because we only use essential cookies

Managing Cookies

You can delete or block cookies through your browser settings at any time. Note that blocking the authentication cookie will prevent you from staying signed in.

Most browsers allow you to manage cookies via Settings → Privacy → Cookies. Refer to your browser's help documentation for specific instructions.