Cookie Policy
UltraGuest uses only the cookies that are needed to run the service. There are no advertising, tracking or social-media cookies, and we do not use cookies to profile visitors. The notice on our pages asks one question: whether we may count visits. Everything else on this page is strictly necessary and works without consent.
Three categories
Strictly necessary (always on): the cookies in the table below. Statistics (off until you allow it): Cloudflare Web Analytics on our own marketing pages, which counts page views without cookies and without identifying you. Marketing: none today. If that ever changes, it is added here first and stays off until you allow it.
Your browser's opt-out signal
If your browser sends the Global Privacy Control or Do Not Track signal, we treat it as "only necessary" without asking and show a green check to confirm. Our support for the signal is declared at /.well-known/gpc.json. To change your answer later, use "Cookie settings" in the footer of any page; your choice is kept in your browser's local storage, not in a cookie.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
| ultraguest_session | ultraguest.com | Keeps you logged in to the Control Panel and protects forms against forged submissions. | Until the browser closes, at most 2 hours idle |
| XSRF-TOKEN | ultraguest.com | Form protection (CSRF). | 2 hours |
| remember_web_* | ultraguest.com | "Stay logged in" for the Control Panel. Only set when you log in. | 5 years, removed on logout |
| __cf_bm, cf_clearance | Cloudflare | Bot and abuse protection for the whole site, including the human-verification challenge on forms. | 30 minutes to 1 year |
Guestbook pages. A guestbook page only sets the session cookie needed to post safely. It carries no analytics and nothing that follows visitors across sites. Guestbooks that are embedded in or linked from other websites are covered by that website's own cookie notice.
Statistics. Guestbook view counters do not use cookies: repeat visits are told apart by a one-way hash that is deleted after 60 days. If we measure traffic on our own pages we use a cookieless method (Cloudflare Web Analytics).
Your choices. You can delete or block cookies in your browser at any time; logging in to the Control Panel and posting to a guestbook need the session cookie. Your answer to our notice is remembered in your browser's local storage, not in a cookie, and "Cookie settings" in the footer lets you change it.
See also our Privacy Policy and Terms of Service.
Last updated September 13, 2026.