Cookies
lalalust sets a small number of cookies, all of them necessary to operate the site. There are no advertising cookies, no analytics cookies and no third-party trackers, which is also why you are not asked to click away a consent banner.
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-sid (formerly sid) | Keeps you signed in, and carries the two things we hold in your server-side session: that you confirmed you are 18 or older, and the random value that protects forms against being submitted from another site in your name. The __Host- prefix means your browser only accepts it from lalalust.com itself over an encrypted connection. If you still have the older sid, it is replaced on your next visit. | 30 days |
lang | Remembers the language you chose. | 1 year |
theme | Remembers light or dark mode. | 1 year |
langhint | Remembers that you closed the “this page is also available in your language” hint, so it is not shown again. It does not choose a language. | 1 year |
nachAlter | Remembers, for a quarter of an hour, which page you wanted when the age screen stopped you — so you land there after confirming, not on the start page. It holds that address and nothing else. | 15 minutes |
ll_p | Partner attribution. Set only when you arrive through a partner's link and have no account yet: it holds a random value so that, if you sign up, the partner who sent you can be credited. It contains nothing about you, is not read by any third party, and is deleted once the sign-up is credited. | 30 days |
ll_saison | Set only on your very first visit, and only while a seasonal look is running (for example Oktoberfest). It holds the name of that season and when you first came — nothing else — so that you see the seasonal look during that one visit and the usual look afterwards. | 1 year |
ll_kanal | Set only when you arrive through a creator's channel link (for example from Reddit or Telegram), and not at all if your browser sends “Do Not Track” or “Global Privacy Control”. It holds which channel and whose link brought you, when, and whether a sign-up, a wish or an order has already been counted — nothing about you, no IP address, no device data. We use it only to count daily totals per channel; nobody, including the creator, sees anything per person. | 30 days |
ll_g146 | Set only when you open one of our pages for creators through a tracked link (for example from a fair card or a partner agency), and not at all if your browser sends “Do Not Track” or “Global Privacy Control”. It holds which channel brought you, when you first came, three yes/no marks (account created, verified, live) and a signature against tampering — nothing about you, no IP address, no device data. It cannot be read by scripts on the page. We use it only to count daily totals per channel. | 30 days from the first visit |
ll_intro150 | Set the first time the short introduction to the shop is shown to you. It holds only the value “1”, so that the introduction is not shown again — nothing about you. If you are signed in, the same note is kept with your account. You can open the introduction again at any time with “How does the shop work?” on the shop page. | 1 year |
ll_onb159 | Set when the short slides for creators were shown to you on the page for creators. It holds only the value “1”, so that the sign-up page does not show you the same slides a second time (they stay one tap away) — nothing about you. | 30 days |
ll_tz | Your browser's time zone (for example “Europe/Zurich”), set by the page itself so dates and times appear in your local time. Nothing else. | 1 year |
ll_fassung | Set only if you switch between the two looks of the site (classic or the newer one). It holds that choice and nothing else. It cannot be read by scripts on the page. | 1 year |
adm_tor | Admin accounts only, only on /admin: a random gate value that lets the admin area open on this device. It cannot be read by scripts on the page. | 1 year |
cockpit | No longer set. An old copy from an earlier version (admin accounts only, /admin) is deleted on your next visit. | — |
There is no separate age cookie and no separate form cookie: your confirmation that you are
18 or older and the form protection value both live in the session behind sid, on our server.
nachAlter only remembers a page address, not the confirmation.
Stored in your browser, never sent to us. A few things are kept in your browser's own storage (not cookies, and not transmitted with your requests): an unsent draft of a long text field, so nothing is lost if the page reloads — deleted after seven days or when you send it; that you dismissed a hint (such as “add to home screen” or the two-factor tip); your “calmer motion” choice; and, for five minutes within one tab, your own account details so the page header loads faster. If you switch on push notifications, your browser also keeps the delivery address for them and the date you switched them on.
All of these are strictly necessary to operate the site, so no consent is required for them — but
you can of course delete them in your browser at any time. Deleting sid signs you out and
makes the age screen appear again; deleting the others simply means you are asked again.
Paying takes you to the payment provider's own pages. What that provider sets in your browser is governed by its own policy and is outside our reach — we do not place a cookie there and receive none back. You return to lalalust with nothing but the result of the payment.
Questions: privacy@lalalust.com
Questions about our policies: legal@lalalust.com · Safety and reports: abuse@lalalust.com · Questions & answers