Effective: November 4, 2026 · Version 2.0
This policy lists every cookie and similar technology used on localmargin.com (our website) and app.localmargin.com (the Local Margin app), what each one does and how long it lasts. It is part of our Privacy policy.
1. Your choice
What runs on your first visit depends on where you are:
- Outside the European Union, the European Economic Area, the United Kingdom and Switzerland, the analytics and advertising tags below load by default. A banner tells you so on your first visit, with a link to this policy, and stays until you choose: Accept all, Reject non-essential (which switches them off at once) or Choose by category. You can change your choice at any time from Cookie settings, at the bottom of every page of the website, in the app's account menu and at the bottom of the sign-in page.
- In the European Union, the European Economic Area, the United Kingdom and Switzerland, or where we cannot tell where you are, a banner asks first. You can Accept all, Reject non-essential, or Choose by category. Until you choose, and whenever you reject them, no analytics or advertising tag loads. Your choice is kept for 12 months, and you can change it at any time from the same places.
Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as an opt-out from advertising tags on that browser, whatever is stored, and the advertising tags do not load.
The website and the app work fully whatever you choose. If you clear your browser's cookies, we start again. We record your choice, and when you made it, so that we can show that we respected it; the record holds the random id of your choice and the two categories, never your IP address.
2. Essential cookies (always on)
These keep you signed in and protect your account and your payments. The service cannot work without them. (Your cart is kept with your account on our servers, not in a cookie.)
| Cookie | What it does | How long |
|---|---|---|
Sign-in session (sb-…-auth-token) | Keeps you signed in and proves each request comes from you | Until you sign out, or up to 400 days |
lm_amazon_oauth | Protects the step where you connect your Amazon seller account, so nobody else can complete it for you | 10 minutes |
lm_try | Carries a free product check from the website into sign-up | 7 days |
lm_consent | Remembers your cookie choice | 12 months from the choice |
lm_region | Remembers whether you are visiting from a region where we ask before setting optional cookies, so we do not have to work it out on every page. It holds only that yes or no, never your country or your IP address | 24 hours |
Our payment processor sets its own cookies on its payment form and pages to prevent card fraud (__stripe_mid, about 1 year; __stripe_sid, 30 minutes). Our bot check on the sign-up, sign-in and password pages and on the free product check may set a short-lived cookie of its own to tell a person from a script.
3. Preference cookies (always on)
These remember how you like the app laid out. They hold no personal information, and we do not use them for anything else.
| Cookie | What it does | How long |
|---|---|---|
lm_sidebar | Whether the side menu is open or collapsed | Up to 12 months |
lm_nav | Which side-menu groups you opened | Up to 12 months |
lm_feed_layout | Your Deal Feed layout (grid or list) | Up to 12 months |
lm_feed_pulse | Whether the new-deals panel on the Deal Feed is open or closed | Up to 12 months |
lm_admin_nav | Which administration-console menu groups you opened (team members only) | Up to 12 months |
4. Our own page counter (no cookies)
Our own analytics counts page views without cookies and runs for every visit, whatever you choose, because it sets no cookie and keeps nothing that identifies your device. With each page view it stores the page, the site that sent you there, any campaign tags in the link, whether you are on a phone, tablet or computer, the approximate country (never your IP address), two scrambled codes made from your IP address and browser (one changes every day, the other every 30 minutes, so that we can count visits without recognising you later), and your account if you are signed in to the app.
5. Analytics tags
These tell us how visitors find and use the site, so that we can improve it and see which campaigns bring Members. They load by default outside the regions named in section 1, and only after consent inside them.
| Tool | Cookies | What it does | How long |
|---|---|---|---|
| Google Tag Manager | None of its own | Loads the analytics and advertising tags below, under the rules in section 1 | — |
| Google Analytics 4 | _ga, _ga_… | Counts visits and actions such as joining the waitlist, signing up, saving a deal and subscribing | Up to 2 years |
| HubSpot (our customer-records tool) | hubspotutk, __hstc, __hssc, __hssrc | Connects your visits with your waitlist or newsletter sign-up, so that we know how you found us | hubspotutk and __hstc up to 6 months; __hssc 30 minutes; __hssrc until you close the browser |
Google Analytics also uses Google signals: if you are signed in to a Google account whose settings allow it, Google can link your visits across your devices, so that our reports count you once. We see only combined numbers, never who you are. You can turn this off in your Google account's data and privacy settings. We have turned off Google's automatic collection of email addresses, phone numbers and postal addresses from our pages.
6. Advertising tags
These tell an advertising platform that a visitor who saw our ad later visited or signed up, so that we pay only for ads that work and can show our ads to people like our visitors. They run on the website and on the app's sign-up page only, never inside the app, and we never let them build a profile from your activity inside the app. They load by default outside the regions named in section 1, only after consent inside them, and never when your browser sends Global Privacy Control.
| Platform | Cookies | What it does | How long |
|---|---|---|---|
| Reddit Pixel | _rdt_uuid | Tells Reddit that a visit or sign-up came from one of our ads | 90 days |
| Google Ads | _gcl_au | Measures which of our Google ads led to a visit or sign-up | Up to 90 days |
When advertising tags run and you sign up, we may also send the platform a confirmation that a sign-up happened, with your email address scrambled (hashed) so that the platform can match it without receiving it in readable form. Opting out (section 1) stops this too.
7. Changes
When we add or remove a cookie or tag, we update this list and the date at the top. We do not add a non-essential cookie or tag without updating this page first.
Contact
Questions about cookies? Email privacy@localmargin.com.