Cookie Policy
UltraGuest uses only the cookies that are needed to run the service. There are no advertising, tracking or social-media cookies, and we do not use cookies to profile visitors. The notice on our pages asks one question: whether we may count visits. Everything else on this page is strictly necessary and works without consent.
Three categories
Strictly necessary (always on): the cookies in the table below. Statistics (off until you allow it): Cloudflare Web Analytics on our own marketing pages, which counts page views without cookies and without identifying you. Marketing: none today. If that ever changes, it is added here first and stays off until you allow it.
Your browser's opt-out signal
If your browser sends the Global Privacy Control or Do Not Track signal, we treat it as "only necessary" without asking and show a green check to confirm. Our support for the signal is declared at /.well-known/gpc.json. To change your answer later, use "Cookie settings" in the footer of any page; your choice is kept in your browser's local storage, not in a cookie.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
| ultraguest_session | ultraguest.com | Keeps you logged in to the Control Panel and protects forms against forged submissions. | Until the browser closes, at most 2 hours idle |
| XSRF-TOKEN | ultraguest.com | Form protection (CSRF). | 2 hours |
| remember_web_* | ultraguest.com | "Stay logged in" for the Control Panel. Only set when you log in. | 5 years, removed on logout |
| __cf_bm, cf_clearance | Cloudflare | Bot and abuse protection for the whole site, including the human-verification challenge on forms. | 30 minutes to 1 year |
Guestbook pages. A guestbook page only sets the session cookie needed to post safely. It carries no analytics and nothing that follows visitors across sites. The embed, the frame of a guestbook's latest messages that an owner can put on their own website, sets no cookie of its own; the website around it has its own cookie notice.
Statistics. Guestbook view counters do not use cookies: repeat visits are told apart by a one-way hash that is deleted after 60 days. If we measure traffic on our own pages we use a cookieless method (Cloudflare Web Analytics).
Your choices. You can delete or block cookies in your browser at any time; logging in to the Control Panel and posting to a guestbook need the session cookie. Your answer to our notice is remembered in your browser's local storage, not in a cookie, and "Cookie settings" in the footer lets you change it.
See also our Privacy Policy and Terms of Service.
Last updated September 26, 2026.