Cookie policy
Short version: the only cookies on this site keep you signed in, keep the sign-in safe from bots, and, for a few minutes if you press Join the Discord, keep that link safe. There are no ads, no analytics and no tracking, so there's no cookie banner to click through.
What this covers
A cookie is a small piece of text your browser keeps for a website. This page also covers two similar things the site uses: your browser's local storage, and the offline page the site keeps on your device.
Needed to sign in
These belong to Clerk, the service that handles sign-in and email codes. They are set on lokalhostclub.com and on clerk.lokalhostclub.com, the address Clerk's sign-in service runs on. Without them the site can't tell who you are.
__clientClerk's long-lived sign-in cookie, used to hand you short-lived session tokens. Page scripts can't read it (HttpOnly). Lasts up to 400 days, which is the most browsers allow.__client_uatA time stamp (“updated at”) that tells the site whether your sign-in is still valid. Lasts up to 400 days. Clerk may also set a copy with a short code added to the end of the name.__sessionYour short-lived session token, only while you're signed in. It is valid for 60 seconds and renewed while you stay, and it goes to our server with each request so we know it's you. Clerk may also set a copy with a short code added to the end of the name.
Needed to keep sign-in safe from bots
These come from Cloudflare, the network that sits in front of Clerk's sign-in service. They are set on clerk.lokalhostclub.com, even before you sign in.
__cf_bmCloudflare's bot protection. Cloudflare says it is needed for that protection to work. Expires after 30 minutes of inactivity._cfuvidCloudflare's rate limiting, which helps it tell visitors apart when they share one internet connection. Ends when you close your browser.
When you sign up, Clerk can also run a Cloudflare Turnstile check in your browser to tell people from bots. Most people pass without doing anything, and some are asked to tick a box. Cloudflare says Turnstile processes only the data strictly necessary for this job, and that it can use cookies and local storage to keep its state. Cloudflare doesn't publish names for these, so we can't list them. They come from Cloudflare, not from us.
Needed to link Discord
This one is ours, and it only appears if you are signed in and press Join the Discord in My settings. It is strictly necessary for that step, and it is gone within minutes.
lh_discord_stateA random value, an expiry time and a signature tied to your sign-in. When Discord sends you back, the site checks it to be sure the return is the one you started, so nobody can attach their Discord account to yours. It is set on lokalhostclub.com, only sent to the Discord pages of this site, and page scripts can't read it (HttpOnly). It lasts 10 minutes at most, and we delete it as soon as you come back.
Pressing the button takes you to discord.com, which has its own cookies and its own cookie policy. They are Discord's, not ours.
Saved in your browser's storage (not cookies)
Clerk's script also keeps three small items in your browser's local storage on lokalhostclub.com. They stay until you clear them.
__clerk_environmentClerk's saved settings for how sign-in works on this site, with an expiry time.__clerk_protect_pidA random ID used by Clerk Protect, Clerk's fraud and abuse checks on sign-up and sign-in.__clerk_protect_stA token, with an expiry time, used by the same checks.
What the service worker keeps
The site installs a small program in your browser, called a service worker. It does two jobs.
- The offline page. It saves one page and the club's icon in your browser's cache (named
lh-offline-v2), so you see a friendly message instead of a browser error when the site can't be reached. It doesn't save the pages you read, and it holds nothing about you. - Push notifications. Only if you turn push on: your browser creates a push subscription for this site, and we keep its address and keys so we can send you club news (see the privacy notice). Turning push off in My settings or deleting your account removes it from our database.
Anything else?
No. The site has no analytics, no advertising and no social media tracking, and it loads no scripts from ad networks. Everything above is there to sign you in, to keep sign-in safe from bots, or to link Discord when you ask, so we don't show a cookie banner. If that changes, this page changes too.
Clearing or blocking cookies
Your browser lets you see, delete and block cookies and site data: look for “cookies” or “site data” in its privacy settings. Clearing the site data for lokalhostclub.com removes everything on this page and signs you out. Some browsers list clerk.lokalhostclub.com separately, so check for both.
If you block cookies, sign-in stops working. The club can't recognise you without them.
Where this comes from
We checked what the live site sets on 3 November 2026. The names and purposes are from the vendors' own documents (the Discord cookie above is set by our own code, so there is no vendor document for it): how Clerk works, Cloudflare cookies and Cloudflare Turnstile.
More about the club
How we handle your details is in the privacy notice, and the rules for using the club are in the terms of use.
Contact
Questions: tony@opusautomations.com
Last updated 3 November 2026.