Cookie Policy
Last updated: June 10, 2026
This policy lists the cookies that litegrants.com sets, what each one does, and how long it lasts. We keep this specific because vague cookie policies aren’t useful to anyone.
1. What Are Cookies
Cookies are small text files that a website stores in your browser. They let a site recognize your browser across requests — without a session cookie, you would be logged out on every page load. Cookies can be first-party (set by the domain you’re visiting) or third-party (set by another domain’s infrastructure that the site depends on). They can be session cookies (deleted when you close your browser) or persistent cookies (stored until they expire or you delete them).
2. Cookies We Use
Litegrants uses only strictly necessary cookies. We do not use advertising, retargeting, or cross-site tracking cookies.
| Cookie name | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
| _litegrants_production | Litegrants First-party |
Stores your encrypted login session. Without this cookie the application cannot identify who you are and you will be unable to sign in. | 2 weeks | Strictly Necessary |
| __cf_bm | Cloudflare Third-party |
Bot management. Cloudflare sets this to distinguish legitimate visitors from automated bots and to prevent abuse. | 30 minutes | Strictly Necessary |
| __cfruid | Cloudflare Third-party |
Cloudflare internal session token used for rate limiting and network routing. Not readable by Litegrants. | Session | Strictly Necessary |
| cf_clearance | Cloudflare Third-party |
Set only when Cloudflare presents a browser challenge (unusual traffic patterns). Records that the challenge was passed so it is not shown again. | 1 year | Strictly Necessary |
All cookies in this table fall under “strictly necessary” — they are required for the site to function securely. CCPA and most privacy frameworks do not require consent for strictly necessary cookies.
3. How to Control Cookies
You can configure your browser to block or delete cookies. Instructions for common browsers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies
Important: Blocking or deleting the _litegrants_production session cookie will prevent you from staying signed in. You will need to log in again on every visit, or the login flow may not function at all depending on your browser’s cookie settings.
Blocking the Cloudflare cookies may cause Cloudflare’s security layer to repeatedly challenge your browser before allowing access to the site.
4. Third-Party Cookies
Cloudflare
All HTTP traffic to litegrants.com passes through Cloudflare’s network for DDoS protection and CDN services. Cloudflare sets the three cookies listed in section 2 above. Litegrants cannot read or access these cookies — they are used solely by Cloudflare’s infrastructure. See Cloudflare’s Privacy Policy for details on how Cloudflare handles data.
PostHog (analytics)
We use PostHog to understand how the product is used. Our integration uses the PostHog server-side Ruby library — PostHog’s JavaScript snippet is not loaded in your browser. As a result, PostHog does not set any cookies in your browser. Product analytics events (page views, feature usage) are sent from our servers to PostHog after your requests are processed. See PostHog’s Privacy Policy.
Stripe (payments)
Subscription billing is handled via Stripe’s hosted checkout and billing portal. Stripe’s JavaScript is not loaded on litegrants.com pages. When you manage billing, you are redirected to Stripe’s infrastructure on the stripe.com domain, where Stripe may set its own cookies (such as __stripe_mid and __stripe_sid) on the stripe.com domain. Those cookies are not accessible to litegrants.com. See Stripe’s Privacy Policy.
5. Changes to This Policy
If we add new cookies or change how existing ones work, we will update this page and revise the “Last updated” date at the top. Material changes — such as adding analytics cookies that track behavior — will be communicated by email to account holders at least 30 days in advance. Non-material changes (corrections, clarifications that don’t affect your rights) may be made without notice.
6. Contact
Questions about this policy or the cookies we use:
Email: [email protected]
Mailing address: Litegrants, Sacramento County, California