Legal
Cookie Policy
Effective November 10, 2026. What this site stores in your browser, and the switch that controls it.
Section 1
What cookies are
A cookie is a small text file a website stores in your browser so it can recognize you on the next page or the next visit. Browsers also offer other storage (local storage and IndexedDB) that works the same way without being a cookie; this policy covers both. A "first-party" cookie is set by caughtstealing.com; a "third-party" cookie is set by another company's domain when its code runs on our page.
This site uses cookies for three things: to make the site work, to measure traffic if you allow it, and, only if we ever turn it on and you allow it, to measure advertising. It does not use cookies to follow you across other websites.
Section 2
Your choices
The first time you visit, a banner asks what you allow. Nothing optional loads until you answer. You can change your answer at any time under Your Privacy Choices or Cookie preferences in the footer of every page.
If your browser sends the Global Privacy Control signal, we treat it as a refusal of analytics and advertising cookies without asking (Cal. Civ. Code § 1798.135(b); 11 CCR § 7025). You can also block or delete cookies in your browser's settings; blocking the always-on cookies may stop the account page from working.
Section 3
Always on
These are needed for the site to work and do not require consent.
bb_klaro_consent (first party, 12 months): records the cookie choices you made so we do not ask again and do not load what you refused.
Firebase Authentication (first party, browser storage, until you sign out): keeps you signed in on the account page. Firebase App Check (first party, browser storage, about one hour, renewed while you use the page): a token proving the request comes from this site, so our server functions accept it.
Google reCAPTCHA Enterprise (third party, set by google.com, about six months, on the account page and when you submit the Recruiting form): used by App Check to tell a real visitor from a bot. Google's privacy policy applies to that cookie.
Cloudflare Turnstile (third party, set by cloudflare.com on the pages with a form, short-lived): protects the contact and waitlist forms from bots. It may store a short-lived token to complete its check; it is not used to identify you.
Section 4
Analytics, if you allow it
If you accept Analytics, Google Tag Manager loads Google Analytics 4, which measures which pages are visited and how people move through the site. IP addresses are anonymized and no advertising signals are shared with Google.
_ga (first party, 2 years) and _ga_* (first party, 2 years): a random identifier that tells Analytics whether a visit is from a returning browser. _gid (first party, one day): the same, for a single day. Analytics data is kept for up to 14 months.
Decline Analytics in Cookie preferences and none of these are set; decline later and we stop sending data and the cookies expire on their own.
Section 5
Advertising: none today
No advertising or social-media tag runs on this site. Cookie preferences shows an Advertising category because our consent tool is ready for one; if we ever add an advertising tag (for example Google Ads or Meta conversion measurement), it will load only after you accept that category, and we will update this page and the Privacy Policy before it goes live.
Section 6
Pages run by other companies
Checkout and Manage billing open pages on stripe.com, which sets Stripe's own cookies for fraud prevention and to run the page. The App Store links open apple.com. Those companies' cookie and privacy policies apply on their pages.
Questions about this policy: email info@caughtstealing.com, or see our Privacy Policy for everything else we collect and your rights (this page was last updated November 10, 2026).