Cookies & similar technologies

Cookies, storage and your choices.

This page lists the storage used by Lilith’s Playhouse, why it is used and how long it lasts.

Last updated 9 October 2026 · Consent notice version 2026-09-08.1

Approach

PECR can apply to cookies, local or session storage, pixels, tags, fingerprinting and similar technology that stores information on, or accesses information from, a device. Where consent is required, optional technology stays off until you choose it.

Accepting optional technology is not required to browse the site. Rejecting it is presented alongside accepting it, and you can change an optional choice through Cookie settings.

Current technology inventory

Name	Type / party	Category	Purpose	Duration	Control
`lp_cookie_consent`	First-party Secure / SameSite cookie	Strictly necessary privacy control	Stores a random reference used to retrieve the latest cookie choice. It does not contain profile or preference data.	Up to 180 days	Clearing it may cause the site to ask for a new choice.
`lp_refresh`	First-party HttpOnly Secure cookie	Strictly necessary when signed in	Restores and maintains a member authentication session. Ordinary browser JavaScript cannot read the token.	Up to 30 days	Used for account and session functionality requested by the member.
`lp_recovery_token`	First-party HttpOnly Secure cookie	Strictly necessary during account recovery	Temporarily stages a password-recovery token hash so an automated email scanner cannot complete the recovery action.	Up to 10 minutes	Created during recovery and cleared after confirmation or expiry.
`lp_guest_chat`	First-party HttpOnly SameSite cookie	Strictly necessary when using Guest Lounge	Holds a random guest-session token so a non-member can keep the same temporary chat identity. The database stores only a SHA-256 hash of the token.	Up to 24 hours	Created when a visitor enters Guest Lounge. Leaving Guest Lounge clears it from that browser.
`lp_age_session`	First-party session storage	Strictly necessary entrance control	Remembers the 18+ entrance acknowledgement for the current browser session. It is not identity or age verification.	Current browser session	Clears with the browser session.

We do not use browser local storage or IndexedDB to retain member profile answers, intimate preferences, private-profile data or authentication tokens.

Optional categories

Functional. Non-essential convenience technology. No optional functional technology is currently active.

Analytics & performance. Optional measurement of visits, navigation, reliability or performance. No optional analytics technology is currently active.

Marketing & audience. Optional advertising attribution, audience measurement or retargeting. No optional marketing or retargeting technology is currently active.

An optional category does not authorise an undisclosed provider or a materially different future purpose.

Your controls

Accept all enables the optional categories described in the current notice.
Reject optional leaves all optional categories off.
Manage choices lets you choose functional, analytics and marketing separately.
Cookie settings lets you review or change a choice later.

Strictly necessary storage does not depend on optional consent where it is required to provide a service you request, maintain authentication, complete recovery, operate Guest Lounge or remember your privacy choice.

Consent evidence

We keep an access-restricted record of optional cookie choices. It can include a random consent reference, an account ID when signed in, the selected categories, date and time, notice and policy versions, page path, source IP address, browser user-agent and an evidence hash.

An IP address is supporting evidence, not proof that a particular person consented. Consent evidence is normally marked for deletion after 12 months. A later change creates a new audit event rather than overwriting the earlier event.

Providers

Lilith’s Playhouse uses Hostinger for website hosting and Supabase for application, authentication and consent-record infrastructure. Resend delivers transactional authentication email. Authentication email open and click tracking is disabled.

External payment, ticketing, retail or event sites may use their own technology after you leave the Playhouse. Their own privacy and cookie notices apply on those services.

Browser controls

Most browsers let you view, block or delete cookies and site data. Blocking all site storage can sign you out, interrupt password recovery, close a guest-chat session, cause the 18+ prompt to reappear or prevent the site from remembering your cookie choice.

Changes and questions

We update this page when the technology, providers, purposes or durations materially change. A material change to optional consent is not treated as automatically covered by an earlier choice.

For data-protection rights and contact information, see the Privacy Policy.