We set the minimum number of cookies needed to make the site work, and nothing on top by default. Here's the complete list.
These can't be turned off — the site doesn't work without them.
| Name | What it does | Lifetime |
|---|---|---|
gplg.user.v1 |
localStorage. Holds your account record + JWT after sign-in so the site recognises you across page loads. | Until you log out or clear browser data |
gplg.cart.v1 |
localStorage. Holds the items in your cart while you're logged out, so the cart persists between visits. | Until you clear browser data |
__cf_bm |
Cloudflare's bot-management cookie. Used to tell humans from automated traffic. | 30 minutes |
| Name | What it does | Lifetime |
|---|---|---|
data-mode |
Remembers your light / dark mode choice (set on the <html> element, persisted to localStorage). | Until you clear browser data |
We do not load Google Analytics, Hotjar, or any similar tracker by default. When enabled by the admin, the WordPress backend may send anonymised events to Meta's Conversions API to attribute paid-ad performance. This happens server-side from our side; no Meta pixel JS is injected into your browser, so no third-party cookie is dropped.
secure.gravatar.com; no cookies are set on
gplgorilla.com.You can clear or block any of the above through your browser's privacy settings. Blocking the necessary cookies will log you out and empty your cart on next visit — that's expected.
Last updated: May 19, 2026.
50,000+ premium plugins and themes, ready to install. Cancel anytime. Partial refund on plans based on usage. Anything you download is yours forever.