Cookie Policy
Top Floor Security, LLC
Effective Date: March 26, 2026 · Last Updated: July 17, 2026
1. What Are Cookies
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function properly, improve performance, and provide information to the site owner. Cookies may be set by the website you are visiting ("first-party cookies") or by third-party services that the website uses ("third-party cookies").
This Cookie Policy explains which cookies and similar technologies are used on topfloorsecurity.com (the "Site"), operated by Top Floor Security, LLC ("TFS," "we," "us," or "our"), why we use them, and how you can manage your preferences.
2. Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Site to function correctly. They enable core features such as session management, authentication, and security protections. Without these cookies, the Site cannot operate as intended. These cookies do not collect information for marketing purposes and cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookies | Maintain your session state while using the Site and backend service authentication | Session (cleared when browser closes) |
| CSRF tokens | Protect against cross-site request forgery attacks on form submissions (Supabase authentication) | Session |
| Authentication tokens | Keep you signed in for form submission authentication and verify your identity | Up to 7 days |
2.2 Analytics Cookies (Google Analytics)
When configured, we use Google Analytics to understand how visitors interact with the Site. Google Analytics sets cookies that collect information in an aggregated form, including the number of visitors, the pages they visit, and the sources that referred them. This data helps us improve the Site's content and user experience. Google Analytics is only active when the NEXT_PUBLIC_GA_MEASUREMENT_ID environment variable is configured.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique users by assigning a randomly generated identifier | 2 years |
| _gid | Distinguishes unique users for the purpose of aggregating session-level data | 24 hours |
| _gat | Throttles request rate to limit data collection on high-traffic sites | 1 minute |
Google Analytics cookies are only set if you accept non-essential cookies via our cookie consent banner. If you reject non-essential cookies, no analytics cookies are placed.
For more information about how Google processes your data, visit Google's Privacy Policy and Google Analytics Opt-Out Browser Add-On.
2.3 Advertising Cookies (LinkedIn Insight Tag)
With your consent, we use the LinkedIn Insight Tag, an advertising technology provided by LinkedIn Corporation. It allows us to measure the effectiveness of our LinkedIn campaigns (conversion tracking) and to reach website visitors with relevant professional content on LinkedIn (retargeting). The Insight Tag is loaded only after you accept non-essential cookies via our consent banner, and never when your browser sends a Global Privacy Control (GPC) signal, which we honor as an opt-out of advertising trackers.
| Cookie | Purpose | Duration |
|---|---|---|
| li_fat_id | First-party member indirect identifier for conversion tracking, retargeting, and analytics | 30 days |
| ln_or | Determines whether LinkedIn campaign measurement can be carried out on this site | 1 day |
| bcookie, li_sugr, and similar | Third-party cookies set by LinkedIn on the linkedin.com domain (browser identification, probabilistic matching) | Set by LinkedIn; see LinkedIn's cookie policy |
If you reject non-essential cookies, the Insight Tag is not loaded. If you withdraw consent after previously accepting, we remove the first-party LinkedIn cookies and stop the tag; however, cookies LinkedIn set on its own linkedin.com domain cannot be removed by us. You can opt out of LinkedIn's cookie use directly via LinkedIn's opt-out controls and learn more in LinkedIn's Cookie Policy.
2.4 Privacy-Friendly Analytics
We may implement privacy-friendly analytics (such as Plausible) in the future. Currently, Google Analytics is our primary analytics tool, loaded only with your consent.
2.5 Local Storage
In addition to cookies, we use your browser's local storage to save certain preferences:
| Key | Purpose | Duration |
|---|---|---|
| tfs-cookie-consent-v2 | Stores your current cookie consent preference (accepted or rejected). Version 2 was introduced when advertising cookies were added, so consent given before that change is not carried over | Persistent until cleared |
| tfs-cookie-consent | Legacy consent preference key, kept in sync with the current preference | Persistent until cleared |
| tfs-theme | Stores your display theme preference (dark or light mode) | Persistent until cleared |
| sb-*-auth-token | Supabase authentication session token for secure form submission authentication | Session-based, auto-refreshed |
Local storage data is stored only in your browser and is not transmitted to our servers except where required for authentication.
3. How to Manage Cookies
3.1 Cookie Consent Banner
When you first visit the Site, a cookie consent banner appears at the bottom of the page. You can choose to Accept All cookies or Reject Non-Essential cookies. Your preference is stored in your browser's local storage (key: tfs-cookie-consent-v2) and is respected on all subsequent visits. You can change or withdraw your preference at any time via the "Cookie settings" link in the page footer, which reopens the banner. We also honor the Global Privacy Control (GPC) browser signal as an opt-out of advertising trackers, regardless of your stored banner preference.
3.2 Browser Controls
Most web browsers allow you to control cookies through their settings. You can typically find these controls in the "Settings," "Preferences," or "Privacy" section of your browser. Common options include:
- Block all cookies: You can configure your browser to block all cookies. Please note that this may prevent the Site from functioning properly, particularly features that require authentication.
- Block third-party cookies: You can block cookies set by third-party services (such as Google Analytics) while still allowing first-party cookies required for Site functionality.
- Delete cookies: You can delete cookies that have already been stored on your device. Note that this will not prevent new cookies from being set on future visits unless you also adjust your browser settings.
- Private/incognito browsing: Most browsers offer a private or incognito mode that automatically deletes cookies when the browsing session ends.
For specific instructions on managing cookies in your browser, please consult your browser's help documentation or visit allaboutcookies.org.
Please be aware that disabling strictly necessary cookies may impair or prevent access to certain Site features, including backend service authentication and form submissions.
4. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. Material changes will be indicated by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we use cookies.
5. Contact
If you have questions about this Cookie Policy or our use of cookies and similar technologies, please contact us at:
Top Floor Security, LLC
30 N Gould St, Ste N, Sheridan, WY 82801, USA
Email: info@topfloorsecurity.com
Website: topfloorsecurity.com
Revision History
| Version | Date | Summary of Changes |
|---|---|---|
| 1.2 | July 17, 2026 | Added Advertising Cookies section (LinkedIn Insight Tag), versioned consent key with re-prompt for pre-advertising consents, Global Privacy Control support; corrected the analytics configuration variable name |
| 1.1 | March 26, 2026 | Added cookie consent banner documentation, local storage items, consent-gated analytics |
| 1.0 | March 26, 2026 | Initial publication |