AlpineCookie Policy
Last updated: September 2026
Who this covers
This page covers cookies set by alpineconsent.com itself. It does not cover the AlpineConsent widget or WordPress plugin as embedded on a customer's own website — what that site sets, and under what categories, is entirely up to that site's own admin, configured through their own AlpineConsent dashboard. See our Privacy Policy for the fuller picture of what data this site collects beyond cookies.
Every cookie this site sets
Four, total — all first-party (set directly by alpineconsent.com, not a third party). Three are strictly necessary and are always set; the fourth is only ever set once you've granted marketing consent yourself.
| Name | Purpose | Category | Duration |
|---|---|---|---|
| alpine_session | Keeps you signed in to your AlpineConsent account. | Necessary | 30 days |
| __alpineconsent | Remembers the consent choice you made on this site's own banner (necessary/preferences/statistics/marketing), so you're not asked again on every visit. | Necessary | 1 year |
| google_oauth_state | A one-time value that prevents forgery during “Sign in with Google” — deleted immediately after you sign in. | Necessary | 5 minutes |
| ac_ref | Attributes a later signup back to the marketing link you clicked to get here. Only ever set if you've already granted marketing consent in the banner above — never set for a first-time visitor who hasn't made a choice yet. | Marketing | 30 days |
Third-party cookies
Cloudflare Turnstile, a CAPTCHA alternative used to filter spam/abuse, is embedded on the Contact page, the public Scanner (including when reached from the dashboard's own "Check consent readiness" link, which reuses this same page), and blog post comments. It sets its own cookies for that verification on challenges.cloudflare.com, governed by Cloudflare's own privacy policy, not ours — some observed directly carry Google-Analytics-shaped names (_ga, _gcl_au), which appears to be Cloudflare's own telemetry for its challenge service rather than anything AlpineConsent runs or has visibility into. No other page on this site loads a third-party script that sets cookies. We deliberately don't run a browser-based analytics or error-tracking tool for exactly this reason — see our Privacy Policy's sub-processors section.
Managing your choice
Reopen this site's own consent banner at any time from the link in the footer to change your choice — clearing marketing consent stops any future ac_ref cookie from being set, though it doesn't retroactively remove one already on your device (clear it yourself through your browser's own cookie settings if you'd like it gone immediately).
Changes to this policy
We'll update the “Last updated” date above whenever a cookie is added, removed, or changes purpose.
Contact
Questions about this policy — use the contact page. See also our Legal Notice for who currently operates this service.