Legal
Cookie Policy
A cookie is a small file a website stores in your browser. This page lists every cookie VisibilityProofmay use, what it stores, how long it lasts, and how our consent banner controls them. You can change your choices at any time with .
How consent works here
- Strictly necessary cookies are always on — they make sign-in, security and remembering your choice possible, and can’t be switched off.
- Analytics and Marketing cookies are off by default and are only set after you allow them in the banner.
- For Google (Analytics / Tag Manager) we use Google Consent Mode v2: the tags run with all storage denied until you consent, so no analytics cookies are written beforehand. The Meta Pixel has no consent mode, so we don’t even load it until you allow marketing.
- Your choice is stored in the
lm_consentcookie for 180 days. Withdraw or change it anytime via Cookie settings — no cookies from a category you turn off will be set on your next page load.
Cookies we may use
Third-party (Analytics/Marketing) cookies below appear only if you consent and only if the corresponding tag is configured. Exact names set by Google/Meta can vary; the list is representative of each category.
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
lm_at | VisibilityProof (first-party) | Keeps you signed in (short-lived access token). | Necessary | 10 minutes |
lm_rt | VisibilityProof (first-party) | Securely renews your session so you stay logged in. | Necessary | 30 days |
lm_su | VisibilityProof (first-party) | Confirms a recent password/2FA check before sensitive actions (step-up). | Necessary | 5 minutes |
lm_wa | VisibilityProof (first-party) | Holds the one-time challenge while you register or use a passkey. | Necessary | 5 minutes |
lm_oauth_state | VisibilityProof (first-party) | Protects the Google/Apple sign-in handshake against cross-site forgery. | Necessary | 5 minutes |
lm_oauth_nonce | VisibilityProof (first-party) | Binds the Google/Apple sign-in response to your browser (replay protection). | Necessary | 5 minutes |
lm_oauth_verifier | VisibilityProof (first-party) | PKCE verifier proving the sign-in was started by this browser. | Necessary | 5 minutes |
lm_oauth_provider | VisibilityProof (first-party) | Remembers which provider (Google or Apple) you chose during sign-in. | Necessary | 5 minutes |
lm_csrf | VisibilityProof (first-party) | Cross-site request forgery protection (double-submit token). | Necessary | 30 days |
lm_consent | VisibilityProof (first-party) | Remembers your cookie choices so we don’t ask every visit. | Necessary | 180 days |
_ga | Google Analytics | Distinguishes visitors to measure usage. | Analytics | 2 years |
_ga_<id> | Google Analytics | Persists session state for GA4. | Analytics | 2 years |
_gid | Google Analytics | Distinguishes visitors (short term). | Analytics | 24 hours |
_gcl_au | Links ad clicks to conversions (Google Ads). | Marketing | 90 days | |
_fbp | Meta | Meta Pixel browser identifier for ad measurement. | Marketing | 90 days |
fr | Meta | Ad delivery and measurement on Facebook. | Marketing | 90 days |
Managing cookies in your browser
Besides our banner, you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of VisibilityProof (like staying signed in) from working.
More information
How we handle personal data more broadly is covered in our Privacy Policy. To change your consent now, use .