Last updated 25 August 2026.
1. Your controls.
You may accept or reject analytics with equal ease. Rejecting analytics does not prevent use of the public site or members room. Use “Cookie settings” in the footer at any time to change or withdraw permission.
We recognise the Global Privacy Control signal. When your browser sends it, analytics is disabled on that browser and the site will not override the signal.
2. Necessary storage.
| Name or pattern | Provider | Purpose | Duration |
|---|---|---|---|
bad_privacy_preferences_v1 | Bear Arms Defense | Local browser storage recording necessary and analytics choices, policy version and GPC status. | Until you clear site data or replace the choice. |
sb-<project>-auth-token | Supabase | Local browser storage maintaining a secure member session and refreshing authentication. | Until sign-out, expiry, revocation or browser-data removal. |
| PKCE verifier & OAuth state | Supabase / Bear Arms Defense | Temporary browser storage preventing interception and cross-site request attacks during sign-in. | For the sign-in transaction. |
cf_clearance where issued | Cloudflare Turnstile | Fraud and bot protection for authentication and forms. | Session or provider-configured security period. |
3. Optional analytics.
After explicit permission, Google Analytics loads with advertising personalisation and Google signals disabled. It may use _ga and _ga_<container> to distinguish visits and produce aggregated measurement. These cookies may remain for up to two years unless you withdraw permission or clear them. Withdrawing through this site stops further analytics loading and attempts to remove first-party analytics cookies.
We do not use advertising cookies, cross-context behavioural advertising or sale of personal data.
4. Provider sign-in & site typography.
If you choose Google or Apple sign-in, that provider receives the request and may read or set cookies on its own domain under its privacy notice. Those provider cookies are initiated only when you select the corresponding sign-in method. Cloudflare Turnstile is loaded on the members sign-in page as a necessary security service.
The site requests the Cardo typeface from Google Fonts as part of its visual presentation. That request discloses ordinary network information such as IP address, browser and requested resource to Google; it does not activate this site's Google Analytics cookies.
5. Browser controls & contact.
Your browser can delete or block cookies and local storage. Blocking necessary authentication storage will prevent member sign-in. Choices are device- and browser-specific, so repeat them on each browser you use.
Questions or withdrawal requests may be sent to contact@beararmsdefense.net. See the Privacy Notice for data rights and provider details.