Cookies & storage
Edition: October 10, 2026
A minimal-storage website
The International Locksmiths Association website has no advertising pixels, marketing analytics, embedded social-media feeds or behavioral-advertising cookies. It uses storage needed for your chosen preferences, account access and abuse prevention. This notice describes the application itself; Cloudflare security features can also process browser signals necessary to deliver and protect the service.
Theme and language preferences
The browser may store ila-theme with the value light, dark or system, and ila-language with en or es. These local-storage values remember your choices on your device. They are not advertising identifiers, are not sent to ILA as analytics and remain until you clear them or the browser removes them. The website follows your system appearance when no explicit theme has been chosen. Language URLs remain directly accessible without stored preferences.
Membership session
After successful sign-in, the __Host-ila_session cookie contains a random session token. It is Secure, HttpOnly, restricted to this host and set with SameSite=Lax. Its normal lifetime is seven days. The corresponding server record can expire or be revoked earlier. Signing out removes the current session. The development-only cookie ila_dev_session is used on localhost for testing and is not used for the production website.
Security and administration
Cloudflare Turnstile checks submitted forms for abuse. Depending on deployment configuration, Cloudflare may use challenge-related storage or cookies; the default implementation does not enable Turnstile pre-clearance. Administrators separately authenticate through Cloudflare Access, whose authentication cookies and identity-provider behavior apply to the restricted administrative area. These are not marketing features.
Your controls
You can change appearance through the theme menu, select English or Spanish through the language switcher, sign out of your account and clear site data in your browser. Blocking all cookies may prevent membership sign-in or administrative access. Public articles remain available without a member account. Nonessential tracking will not be added without reassessing applicable consent requirements and updating this notice.