ROOM FOR CHANCE
Cookies and preferences
What is active
There are no advertising or analytics tools, embedded Gmail or WhatsApp widgets, or external CAPTCHA. Number generation, country filtering and language links do not need tracking cookies. The contact form sends your entries to our server and database; this is personal-data processing covered by the privacy notice, not an optional-cookie category.
The necessary preference cookie
The first-party rfc_preferences cookie is set after saving a choice. It holds the notice version, choice time, random receipt reference and Donorbox permission. It lasts 90 days, with Secure and SameSite=Lax attributes, and remembers your requested choice rather than tracking browsing. The database receipt expires after 180 days and is deleted at the next application cleanup. Storage strictly necessary to remember this choice can be exempt from consent.
Your controls
Choose Necessary only or Reject optional services to keep optional content off. Cookie preferences in the footer lets you inspect services, save or withdraw permission. Optional choices start off. Browsing, silence and closing a page are not consent. A new notice version or an expired cookie prompts another choice. Blocking cookies in your browser may mean choosing again. The form and generator remain available without optional permission.
Donorbox
No campaign is connected: the option is disabled and no Donorbox request is made. If enabled later with an updated notice, the donation frame loads only on the donations page after permission. Refusal keeps it blocked; withdrawal removes it and prevents future loading. This site cannot delete cookies on another provider's domain; use browser or provider controls for those.
Hosting security cookies
On 15 September 2026 a hosted response included Cloudflare's __cf_bm cookie on chatgpt.site, marked Secure and HttpOnly with a 30-minute expiry. Cloudflare describes it as bot protection that expires after 30 minutes of inactivity. It is controlled by the infrastructure, not the optional-service preferences. This observation is not a complete inventory for sign-in or custom domains. OpenAI hosting and ChatGPT sign-in may also use security and authentication technologies; our settings do not override their controls.
External links
Gmail, WhatsApp and other linked providers open only when selected and apply their own policies. Opening their websites is separate from permission for embeds here. Read the privacy notice for data processing and the provider policies below for their services.