Cookie & Storage Policy
Secure sign-in, separate remembering choices and no advertising or analytics integration.
Last updated 2026-10-09.
The short version
Requested Steam sign-in uses security cookies. You can browse without signing in. Settings use this tab by default; remembering them across visits and staying signed in for seven days are separate optional choices. You can use GTF while leaving both options off.
What GTF stores
Cookies and browser storage are different technologies; both are described here.
| Item | Purpose | Lifetime / choice |
|---|---|---|
| gtf_login cookie | Protect the Steam sign-in callback | Up to 10 minutes; requested sign-in |
| gtf_session cookie | Authenticate account requests | Browser session, token up to 24 hours; optionally up to 7 days |
| gtf-storage-choice-v1 (localStorage) | Remember your storage permission choice | 180 days; no analytics identifier |
| gtf-pref:* (sessionStorage) | Taste, hidden titles, personal reviews and layout choices | Current tab; default |
| gtf-* preferences (localStorage) | Remember those settings across visits | Only with your remembering choice; until cleared |
| gtf-pending-plan / ready-notice markers (sessionStorage) | Restore a requested invitation and avoid duplicate ready alerts | Current tab |
| gtf-measured-speed (sessionStorage) | Reuse the download-speed measurement | Result valid for up to 30 minutes in this tab |
Choose or change remembering
Open Cookie settings in the footer. Both optional switches start off. Save choices applies your selection; Use session only keeps both off. Withdrawing remembered preferences copies them into this tab and removes the persistent settings used by that choice. Clear my preferences on the Privacy page also removes older device data from testing. Closing the settings panel does not accept optional persistence.
Changing the seven-day option updates an existing GTF cookie through a protected server request. Turning it off makes that browser’s cookie session-only and limits its token lifetime to no more than 24 hours; signing out removes the cookie immediately. This does not invalidate a copied token on another device.
Other websites and game media
Steam sign-in, Steam Store pages and game media can involve Valve/CDN requests and their own policies. Cloudflare receives ordinary request information during the bounded speed measurement. These are explained in the Privacy Policy. GTF does not use Google Analytics, Tag Manager, advertising pixels or a cookie that tracks you across websites . Future optional tracking must be explained and enabled only after an appropriate choice.
Browser controls and contact
Your browser can block or delete cookies/storage. Blocking all sign-in cookies prevents authentication; it does not prevent public browsing. Browser session restoration may retain a session cookie. Contact info@gamesthatfit.com for questions. The Privacy Policy explains controller contact details, hosting and your rights.