Cookie Policy
Version: 2026-09-30.1 Effective: 2026-09-30
Little Collie Shepherd uses cookies only to run the service. Today, every cookie we set is strictly necessary — sign-in sessions, security protections, and the record of your own cookie choice. We set no advertising, analytics, or cross-site tracking cookies of any kind.
We still give you a consent control, for two reasons: transparency, and so that if we ever introduce an optional category (for example, first-party analytics), it is off by default and stays off unless you have turned it on. Declining is exactly as easy as accepting — one click each, side by side.
Strictly necessary cookies
These are required for the service to function and are set without consent, as EU law permits for strictly necessary cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
shepherd_session |
Keeps you signed in to your workspace. | 24 hours, renewed while you use the service, and never more than 14 days after you signed in |
shepherd_code_login |
Holds the email address a sign-in code was just sent to, so the code page does not ask for it again. | 30 minutes |
shepherd_wa_login |
Holds the one-time challenge reference during a passkey sign-in. | 5 minutes |
shepherd_preauth |
When you belong to more than one workspace, carries you from signing in to choosing which workspace to open. | 10 minutes |
shepherd_next |
Remembers the page that asked you to sign in again, so you return to it afterwards. | 15 minutes |
shepherd_wa_reg |
Holds the one-time challenge reference while you add a passkey. | 5 minutes |
shepherd_pk_device |
Remembers that this device has a passkey set up (or that you asked us to stop suggesting one). | Up to 400 days |
shepherd_email_change |
Holds the new email address while you confirm it with the code we sent there. | 30 minutes |
shepherd_new_token |
Carries a newly issued WordPress connection token to the Sources page, so it is shown to you once and never travels in a web address. | 5 minutes, deleted once shown |
shepherd_reset_tokens |
After you reset all access to your account, carries the replacement WordPress connection tokens to the reset page, so they are shown to you once. | 5 minutes, deleted once shown |
shepherd_yt_oauth |
Protects the YouTube connection flow against cross-site request forgery. | Minutes, during the connection flow |
shepherd_meta_oauth |
Protects the Facebook and Instagram connection flow against cross-site request forgery. | Minutes, during the connection flow |
shepherd_onboarding_dismissed |
Remembers that you dismissed the setup guide for this workspace. | Browser session |
shepherd_staff_session |
Staff console sign-in (Little Collie staff only; never set for customers). | Browser session |
shepherd_staff_device |
Staff console device recognition (Little Collie staff only). | Browser session |
shepherd_consent |
Records your cookie choice so we do not ask again. | 12 months |
cf_clearance |
Set by Cloudflare, the network edge in front of the service, only after your browser has passed a security check during an attack or from a suspicious network. It records that the check was passed so it is not repeated on every page. | Up to 30 minutes by default; Cloudflare may set it shorter |
Local storage (not cookies, listed for honesty)
| Key | Purpose | Consent |
|---|---|---|
lc-theme |
Remembers the light/dark theme you explicitly picked. | Not required — stored only when you press the theme toggle, and used for nothing else. |
Optional categories
- Functional — currently none. Reserved for optional conveniences.
- Analytics — currently none. We use no analytics cookies today. We do measure page visits with Cloudflare Web Analytics, which is cookieless — it sets no cookie, uses no local storage and does not fingerprint your browser — which is why it is not in this table and needs no consent.
If we ever add a cookie in these categories, it is set only if you have opted in via the consent control, and this policy will be updated to list it by name.
Changing your choice
Use the consent banner when it appears, or the controls below on this page in the
app, to change your choice at any time. Your choice is stored in the
shepherd_consent cookie; deleting your browser's cookies also resets it.