Cookie Policy
Every cookie and browser-storage item this editorial site uses, what it does, who sets it, how long it lasts, and how to control it. Updated: September 3, 2026.
Summary
Clothoff AI is a static editorial site that reviews third-party undress-AI tools. It has no accounts, no uploads, and no image processing, so it needs very little client-side storage. This page lists all of it: two Google Analytics cookies and one localStorage flag. Nothing else is set by this site. Third-party sites you visit after clicking a review link set their own cookies under their own policies. The wider data picture is in the Privacy Policy; this page is informational, not legal advice.
- Analytics cookies:
_gaand_ga_G-YDLCXGXXQB, set by Google Analytics 4 through Google Tag Manager container GTM-KQW3DB4F, lifetime 2 years. - Strictly necessary storage:
clothoffai_age_okin localStorage, remembering your confirmation of being 18 or older. - Not used: advertising cookies, social pixels, fingerprinting, session or login cookies, A/B-testing tools, chat widgets.
- Controls: browser settings, the Google Analytics opt-out add-on, Global Privacy Control, and the Do Not Sell or Share route.
Cookies and Storage in Use
The inventory below was verified against the site’s source code and Google’s documentation on September 3, 2026. A cookie is a small text file the browser stores for a website; localStorage is a browser storage area that persists until you clear it.
| Name | Type and category | Purpose | Provider | Lifetime | Contains |
|---|---|---|---|---|---|
_ga | HTTP cookie · analytics | Distinguishes one browser from another so page views can be counted per visitor | Google Analytics 4 (Google) | 2 years | Random client ID and a timestamp; no name, email, or IP address |
_ga_G-YDLCXGXXQB | HTTP cookie · analytics | Keeps the session state for property G-YDLCXGXXQB (session start, event counts) | Google Analytics 4 (Google) | 2 years | Session identifiers linked to the client ID |
clothoffai_age_ok | localStorage · strictly necessary | Remembers your 18+ confirmation so the age screen is not repeated on every page | this website (first party, client-side only) | Until you clear site data; no automatic expiry | One yes value; never transmitted to a server |
Google describes the main cookie this way: “‘_ga’, the main cookie used by Google Analytics, enables the service to distinguish one visitor from another and lasts for 2 years,” adding that “each ‘_ga’ cookie is unique to the specific property, so it cannot be used to track a given user or browser across unrelated websites” (Google, How Google uses cookies). The property-specific cookie has the same 2-year lifetime.
Both cookies are loaded by two tags in the page header: the Google tag (gtag.js) for property G-YDLCXGXXQB and the Google Tag Manager container GTM-KQW3DB4F. No other tags are configured in the container. The reports we read in Google Analytics show pages viewed, referral sources, device types, and city-level location; Google states that Analytics does not log or store IP addresses (Google Analytics Help, EU-focused data and privacy). Event- and user-level data are kept in Analytics for no longer than 14 months, the maximum retention available for standard properties (Google Analytics Help, Data retention).
Categories Explained
- Strictly necessary. Storage without which a function you asked for cannot work. The age-gate flag is the only item in this category: the site is for adults 18+ and must remember your confirmation between pages. Regulators treat such storage as exempt from consent; the UK ICO describes “an exception for cookies that are essential to provide an online service at someone’s request” (ICO, Cookies and similar technologies).
- Analytics. The two Google Analytics cookies. They tell the editorial team which reviews and guides are read, which pages return errors, and which devices readers use. They are not strictly necessary and can be blocked without any loss of function.
- Advertising, social, functional-third-party. None. The site earns commissions through explicit sponsored links, not through ad networks, and uses no embedded social widgets, comment systems, or chat tools.
Consent, US Opt-Out, and EU Rules
United States. No federal or state law requires prior consent for analytics cookies, so US visitors do not see a consent banner. California’s CCPA instead creates a right to opt out of the “sale” or “sharing” of personal information; because Google may use analytics cookie data across sites, we treat these cookies as potentially “shared” for cross-context behavioral advertising within the meaning of Cal. Civ. Code §1798.140(ah) (§1798.140) and honor every opt-out route described on Do Not Sell or Share My Personal Information, including Global Privacy Control signals under CCPA Regulations §7025 (California Privacy Protection Agency). Comparable opt-out rights in 18 other states are honored the same way for all visitors.
EU, EEA, and UK. The ePrivacy Directive and the UK Privacy and Electronic Communications Regulations require consent before non-essential cookies are stored. The ICO puts it plainly: “You must tell people if you set cookies, and clearly explain what the cookies do and why. You must also get the user’s consent” (ICO, Cookies and similar technologies). Visitors located in those regions are shown a consent request before Google Analytics loads; analytics runs only after a positive choice, and the choice can be reversed at any time by clearing site data or blocking cookies. The legal basis for analytics under Regulation (EU) 2016/679 is consent, Article 6(1)(a), and withdrawal is as easy as giving it (Article 7(3)) (GDPR, EUR-Lex).
How to Manage Cookies
Any one of the following works; combine them if you want belt and braces.
- Browser settings. Every major browser lets you view, delete, and block cookies per site. Search the cookie list for “this website” and remove or block the two
_gaentries. Blocking cookies does not affect reading the site. - Google Analytics opt-out add-on. Google offers a browser extension that prevents Analytics from collecting data in that browser on all websites (Google Analytics opt-out browser add-on). Google also documents its general cookie controls at How Google uses information from partner sites.
- Global Privacy Control. Enable GPC in a supporting browser or extension. The site treats the signal as an opt-out from sale or sharing for that browser, as explained on Do Not Sell or Share.
- Clear the age flag. Clearing site data for this website removes
clothoffai_age_ok; the age screen will simply appear again on your next visit. - Ask us. To have analytics records tied to your cookie ID deleted, send the
_gavalue through Privacy Rights Request; deletion requests are answered within 45 days.
Blocking analytics has no effect on affiliate redirects, which set no cookies, or on the content shown. The California Attorney General’s guidance confirms that businesses may not provide a different level or quality of service because you exercised a privacy right (California Attorney General, CCPA).
Changes and Contact
If a new cookie or storage item is ever added — for example a consent-management tool — this page and the Privacy Policy will be updated first, with the date shown at the top, and the change will be noted in the Transparency report. Questions about cookies: privacy@clothoff.ai. Other ways to reach the editorial team: Contact. Safety rules for any reviewed tool — your own photos or those of consenting adults 18+ only — are in Responsible AI.
Cookie Policy FAQ
Which cookies does this website set?
Exactly two, both from Google Analytics 4: _ga and _ga_G-YDLCXGXXQB, each lasting 2 years and holding a random client ID. The site also writes one localStorage item, clothoffai_age_ok, to remember the 18+ confirmation. There are no advertising cookies, no social-media pixels, no session cookies, and no login cookies, because the site has no accounts.
Why is there no cookie banner for US visitors?
US law does not require prior consent for analytics cookies; the CCPA instead grants a right to opt out of sale or sharing, which this site offers through Global Privacy Control, browser controls, and the Do Not Sell or Share page. Visitors from the EU, EEA, and UK are asked for consent first, because the ePrivacy rules there require it.
How do I block or delete the cookies?
Open your browser’s cookie settings, search for this website, and delete or block the entries; the site keeps working without them. The Google Analytics opt-out browser add-on stops Analytics collection in that browser on every site. Turning on Global Privacy Control tells the site not to treat the browser’s analytics data as shareable. Instructions for each route are on this page.
Does the age-gate flag track me?
No. The flag is a single yes value stored in your browser’s localStorage under the key clothoffai_age_ok. It is never sent to the server, contains no identifier, and has no expiry date, so it stays until you clear site data. Deleting it only means the age screen appears again on your next visit to the site.
Does Google see my IP address through these cookies?
Google receives the IP address with each analytics request in order to derive a city-level location, but states that Google Analytics “does not log or store IP addresses from EU users” and, for all properties, that IP masking is unnecessary because addresses are not logged or stored. The cookies themselves contain only a random client ID, never an IP address.
Are affiliate links tracked with cookies?
No. Sponsored links pass through redirects on this site that count clicks per day without setting cookies or recording IP addresses. Once you arrive at a partner’s site, that partner may set its own cookies under its own policy, which we do not control. Details on how partnerships work are in the Affiliate disclosure.