Cookies policy.
What we store, and why.

1. What are cookies?

Cookies are small text files that a website places on your browser or device when you visit. They are widely used to make websites work correctly, remember your preferences, keep you signed in, and help website owners understand how their site is being used. This Cookies Policy explains how SpoofWard (operated by T&C Technologies LTD, Hizma Street 7, Beit Hanina, Jerusalem, Israel, Company Reg. 516092582) uses cookies and similar technologies (such as localStorage and session storage) on spoofward.com.

This policy should be read together with our Privacy Policy, which explains how we handle personal data more broadly.

2. Categories of cookies we use

We classify cookies into three categories:

• Strictly necessary cookies — required for the service to function. These cannot be turned off without breaking core functionality (for example, signing in or submitting forms safely).
• Functional cookies — remember choices you make (such as cookie banner dismissal or theme preference) to improve your experience.
• Analytics cookies — help us understand how visitors use the site so we can improve it. These are only set with your consent.

SpoofWard does not use advertising cookies, retargeting pixels, or cross-site tracking cookies.

3. Detailed list of cookies

Cookie / Storage key	Category	Purpose	Retention
spoofward_session	Strictly necessary	Maintains your authenticated session while you are logged in.	2 hours (rolling)
XSRF-TOKEN	Strictly necessary	Protects against cross-site request forgery (CSRF) attacks on forms.	2 hours
cookie_consent	Functional	Remembers your cookie-consent choice so we don't show the banner again.	12 months
ms_theme (localStorage)	Functional	Stores your theme preference (light / dark / space) between visits.	Until you clear it
_ga, _ga_*	Analytics (Google Analytics 4)	Distinguish unique visitors and measure aggregate page usage. Set only after you accept analytics cookies.	Up to 13 months
__cf_bm, cf_clearance	Strictly necessary (Cloudflare)	Bot mitigation and security challenges provided by Cloudflare in front of our infrastructure.	Up to 30 minutes (__cf_bm) / 1 year (cf_clearance)
Lemon Squeezy checkout cookies	Strictly necessary (processor)	Set by Lemon Squeezy, our Merchant of Record, only during checkout to process your order securely. Subject to Lemon Squeezy's Privacy Policy.	Session / Lemon Squeezy-defined

4. Legal basis and consent

We rely on the following legal bases under the GDPR and similar laws:

• Strictly necessary cookies are set on the basis of our legitimate interest in operating a secure, functioning website, and they do not require your consent under GDPR Article 5(3) of the ePrivacy Directive.
• Analytics cookies are only set after you give consent via our cookie banner. You can withdraw consent at any time (see section 5).

5. How to manage or withdraw consent

You can manage cookies in two ways:

1. Via our cookie banner — the banner appears on your first visit and lets you accept or decline analytics cookies. You can re-open it anytime by clearing your browser cookies for spoofward.com or by clicking the "Cookie settings" link in your account (where available).
2. Via your browser — all major browsers allow you to block or delete cookies. See the help pages for Chrome, Firefox, Safari, or Edge.

Blocking strictly necessary cookies will prevent parts of SpoofWard (like signing in) from working correctly.

6. Third-party services that may set cookies

The following third parties may set cookies when you interact with specific parts of our Service:

• Lemon Squeezy — our Merchant of Record, sets cookies during checkout and on the customer portal.
• Cloudflare — sits in front of our infrastructure and may set security cookies (e.g. __cf_bm).
• Google Analytics / Google Workspace (Gmail SMTP) — analytics cookies are set only with consent.

Each provider is responsible for its own privacy practices. See our Privacy Policy for links to their policies.

7. Updates to this policy

We may update this Cookies Policy to reflect changes in law, technology, or our practices. The "Last updated" date at the top of this page shows the most recent revision. Material changes will also be announced on our homepage or via email where appropriate.

8. Contact us

If you have any questions about this Cookies Policy or how we use cookies, please contact us: