Cookie Policy
v1.0 · 11 August 2026, plus 2 wording clarifications made on 21 August 2026 and awaiting Peter's v1.1
This explains the cookies our website uses and how you can control them. It sits alongside our Privacy Policy.
What cookies are, and the ones we use
Cookies are small files a website puts on your device. Essential cookies make the site work (signing in, the checkout, security, remembering your cookie choice) and are always on. Analytics cookies help us see how the site is used so we can improve it, and are set only if you agree. Marketing cookies let us measure our advertising and reach people already connected with us, and are set only if you agree. We do not use cookies to build advertising profiles about people dealing with their own pain.
Your choice
If we set any non-essential cookies, a banner lets you accept or reject them when you arrive. Rejecting is as easy as accepting, and you can change your choice at any time through the cookie settings on our site. Where a site of ours sets none, there is nothing to consent to, so no banner appears and the cookie settings will tell you so.
The cookies we set
The full list, each cookie’s name, who sets it, what it does and how long it lasts, is shown here and kept current.
op2g_consent
Set by: OldPain2Go
What it does: Remembers the choice made on the cookie banner, so nobody is asked twice
How long it lasts: 12 months
Category: Essential
_fbp
Set by: Meta, through the Meta Pixel running on this site
What it does: Identifies this browser so Meta can match a visit to an advert
How long it lasts: 89 days
Category: Marketing
v
Set by: systeme.io
What it does: Systeme.io technical cookie used to identify visitors to public funnel pages and calculate funnel/page visit statistics
How long it lasts: 399 days (the browser's 400-day cap; the server asks for ten years)
Category: Analytics
Note: this one is set by the platform our funnel pages run on, before our cookie banner can run, so it cannot be declined. We have raised this with them in writing.
m
Set by: Stripe, fraud prevention on the payment form
What it does: Fraud prevention on the payment form
How long it lasts: 399 days
Category: Essential
__cf_bm
Set by: Cloudflare, through the hCaptcha check on the payment form
What it does: Tells a real visitor from an automated one, so the form is not abused
How long it lasts: 30 minutes
Category: Essential
purchase_process_id_*
Set by: systeme.io
What it does: Carries the checkout session so an order can complete
How long it lasts: Session
Category: Essential
__stripe_mid
Set by: Stripe
What it does: Fraud prevention on the payment form
How long it lasts: 364 days
Category: Essential
__stripe_sid
Set by: Stripe
What it does: Fraud prevention on the payment form
How long it lasts: 30 minutes
Category: Essential
__cflb
Set by: Cloudflare, through hCaptcha
What it does: Keeps the browser talking to the same server while the check runs
How long it lasts: 30 minutes (hCaptcha states it varies, up to 30 days)
Category: Essential
hmt_id
Set by: hCaptcha
What it does: hCaptcha's own words: used for strictly necessary anonymous service-related statistics, and for other technical purposes like assisting in accessibility support
How long it lasts: 29 days (hCaptcha states 30)
Category: Essential
trustedsite_visit
Set by: TrustedSite (trust badge, script cdn.ywxi.net)
What it does: Records that this browser has already been to the site today
How long it lasts: 24 hours
Category: Essential
trustedsite_tm_float_seen
Set by: TrustedSite (trust badge, script cdn.ywxi.net)
What it does: Records that the trust badge has been displayed
How long it lasts: 5 minutes
Category: Essential
AWSALBCORS
Set by: TrustedSite (trust badge, script cdn.ywxi.net)
What it does: Keeps the browser on the same TrustedSite server while the badge loads
How long it lasts: 6 days
Category: Essential
_pxvid
Set by: Stripe, using HUMAN Security's bot detection on the payment form
What it does: Tells a real visitor from an automated one, on the payment form
How long it lasts: 364 days
Category: Essential
_px3
Set by: Stripe, using HUMAN Security's bot detection on the payment form
What it does: Keeps the bot-detection session going while the payment form is open
How long it lasts: 5 minutes
Category: Essential
_pxde
Set by: Stripe, using HUMAN Security's bot detection on the payment form
What it does: Carries data about the bot-detection check itself, for the provider's own reporting
How long it lasts: 5 minutes
Category: Analytics
Note: this one is set by the payment provider's own bot-detection service, on its own address, before our cookie banner can act on it, so it cannot be declined here.
pxcts
Set by: Stripe, using HUMAN Security's bot detection on the payment form
What it does: Keeps the bot-detection check consistent across browser tabs
How long it lasts: session (goes when the browser closes)
Category: Essential
Last checked 26 August 2026. This list is produced by loading 19 pages of the site in a real browser with an empty cookie store, several times each and scrolling through each one the way a visitor does, because some cookies are only set once you reach the part of the page that uses them, and recording what is actually set, rather than from memory, so it can be re-checked at any time. It covers both states: what is set before you choose, and what is set after agreeing, so nothing is left off the list just because it waits for your permission.
Managing cookies
You can also block or delete cookies in your browser settings, though blocking essential ones may stop parts of the site working. For how we handle personal data more broadly, see our Privacy Policy, or email support@oldpain2go.com.