Cookies
Last updated 16 August 2026
Lodestead sets one cookie, and only after you sign in. There are no advertising cookies and no third-party trackers, which is why you are not being asked to dismiss a consent banner.
What it is
| Name | Purpose | Life |
|---|---|---|
sfc_session | Keeps you signed in to your household. | 90 days |
It is an HttpOnly cookie, so scripts on the page cannot read it, and it is marked Secure and SameSite=Lax. It contains a signed reference to your household and nothing else — no name, no email, no family content.
Strictly necessary
This cookie is strictly necessary to provide a service you have asked for: without it you cannot stay signed in. Under the UK's PECR rules that means it does not require consent. If you refuse it in your browser, Lodestead cannot sign you in.
Local storage
The app also keeps a small amount of data in your browser's own storage: which family member is using that device, and a cached copy of your household so the app still opens when the connection drops. This never leaves the device and is cleared when you sign out or clear site data.
Wall displays
A paired wall display stores its own revocable device credential locally. You can revoke it from your phone at any time, which makes the stored credential useless immediately.