Cookie Policy
Last updated: July 4, 2026
Short version: this site is essentially cookieless. We don't use analytics, advertising, or tracking cookies. Here's the detail.
What are cookies
Cookies are small pieces of data that a website can store in your browser, often used to remember who you are or to track your activity across visits or sites. Some cookies are "strictly necessary" for a site to function (like remembering that you passed a security check); others are used for analytics, advertising, or tracking, and typically require consent under laws like GDPR and the ePrivacy Directive.
What we use
We only use strictly-necessary cookies, all set by Cloudflare on our behalf:
| Cookie / storage | Purpose | Type |
|---|---|---|
| Cloudflare Turnstile challenge cookie | Bot protection on our forms (waitlist, contact). Sets a short-lived cookie to hold challenge state while you submit a form. | Strictly necessary / functional |
__cf_bm |
Cloudflare's bot-management cookie, used to distinguish real visitors from bots. | Strictly necessary |
cf_clearance |
Records that a browser has passed a Cloudflare security check, so you're not repeatedly challenged. | Strictly necessary |
None of these cookies are used to track you across sites, build an advertising profile, or identify you personally beyond the immediate security purpose described above.
What we don't use
- No analytics cookies (e.g. Google Analytics)
- No advertising or retargeting cookies or pixels (e.g. Facebook Pixel, TikTok Pixel)
- No cross-site tracking cookies
- No session-recording tools
- No behavioral profiling
Cloudflare Web Analytics disclosure
We measure site traffic using Cloudflare Web Analytics. This runs server-side and is cookieless — it does not set any cookie in your browser, does not use any persistent or cross-site identifier, and does not collect personal data. It simply gives us aggregate traffic counts (like page views) so we know the site is working and how content is performing.
Why there's no consent banner
Under GDPR and the ePrivacy Directive, a consent banner is only required for cookies that are not "strictly necessary" — for example, analytics or advertising cookies. Because we only use strictly-necessary cookies (Cloudflare's security and bot-protection cookies) and a cookieless analytics tool, no consent banner is legally required, so we don't show one. If we ever add analytics or marketing cookies in the future, we will add a consent banner at that time and update this page.
How to opt out
Because we don't use tracking or advertising cookies, there's nothing to "opt out" of in that sense. If you'd like to block all cookies, including the strictly-necessary ones, you can do so in your browser's privacy settings. Note that disabling Turnstile-related cookies may prevent you from submitting our forms (like the waitlist or contact form), since that's how we confirm you're not a bot.
Changes to this policy
If our use of cookies changes — for example, if we introduce analytics or marketing cookies — we'll update this page and add a consent banner where required. We'll also update the "Last updated" date above.
Contact
Questions about this policy? Email us at [email protected]. See also our Privacy Policy for how we handle the data we do collect.
MendozaLab · Portland, Oregon, USA