Cookie Policy
Last updated: 28 September 2026
This policy explains how www.maximumprotection.online, operated by SISU ENTERPRISE LIMITED, uses cookies and similar technologies. For everything else about your data, see the Privacy Policy.
What cookies are
Cookies are small text files that a website stores in your browser to remember information between pages or visits. Other technologies, such as pixels and scripts that read browser identifiers, work in a similar way: in this policy we call them all “cookies”. Some are set by us, others by the services we use.
Cookies we use
Strictly necessary (always active)
These cookies are needed for the website to work and to keep it secure, and do not require consent.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
mp_consent |
Maximum Protection | Stores your cookie choice, with its version and date | 6 months |
__cf_bm |
Cloudflare | Tells people and bots apart, to protect the website | 30 minutes of inactivity |
cf_clearance |
Cloudflare | Remembers that you passed a Cloudflare security check | Set in our Cloudflare settings |
__client_uat |
Clerk (admin area only) | Session security: records when the sign-in state last changed | Set by Clerk |
__session |
Clerk (admin area only) | Session security: holds the sign-in token of a signed-in admin, valid for 60 seconds and renewed automatically | Set by Clerk |
__client |
Clerk, on clerk.maximumprotection.online | Session security: keeps an admin signed in | Set by Clerk, within your browser’s limits |
__clerk_db_jwt |
Clerk (admin area only) | Session security, only in development versions of the website | Set by Clerk |
Cloudflare delivers and protects the whole website: every visit passes through its network, and it may set its security cookies to detect bots and attacks (see Cloudflare’s cookie list). Clerk provides sign-in to our admin area, for admin accounts only; its script runs on the website and may set its cookies for session security.
The anti-bot check on the purchase form (Cloudflare Turnstile) runs in a frame served by Cloudflare and processes technical signals that are strictly necessary to detect and block bots. See Cloudflare’s Turnstile privacy addendum.
Analytics (only with your consent)
We use Google Analytics 4, provided by Google Ireland Limited and loaded through Google Tag Manager, to measure how the website is used. It runs only after you accept Analytics cookies. Google states that Google Analytics does not log or store the individual IP addresses of users in the EU, Switzerland and the UK.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes users | 2 years |
_ga_<container-id> |
Google Analytics | Keeps the session state; <container-id> comes from our Google Analytics measurement ID |
2 years |
Source: Google Analytics cookie usage.
Marketing (only with your consent)
We use the Meta Pixel and the TikTok Pixel, loaded through Google Tag Manager, to measure and optimise our ads on Facebook, Instagram and TikTok.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta | Identifies your browser so that Meta can measure the results of our ads | 90 days |
_fbc |
Meta | Stores the click identifier when you arrive from a Meta ad | 90 days |
_ttp |
TikTok | Identifies your browser so that TikTok can measure and improve the results of our ads | 13 months from last use |
ttcsid, ttcsid_<pixel code> |
TikTok | Measure and improve the results of our ads | 13 months from last use |
ttclid |
TikTok | Stores the click identifier when you arrive from a TikTok ad | 13 months from last use |
With your Marketing consent, we also send some events to Meta from our server (Conversions API), as described in the Privacy Policy. TikTok may also use its own _ttp cookie on the tiktok.com domain. Source: TikTok Pixel cookies.
These are the default durations set by Google, Meta and TikTok; your browser may shorten them.
How we ask for consent
On your first visit, a banner lets you “Accept all”, “Reject all” or choose by category under “Preferences”. No box is pre-ticked, and closing the banner with the X counts as rejecting. Google Tag Manager is loaded only if you accept Analytics or Marketing. Google Consent Mode v2 denies every category by default and tells Google’s tags which categories you accepted: Google Analytics runs only if you accept Analytics, and the Meta and TikTok pixels only if you accept Marketing. If you reject everything, no analytics or marketing tool is loaded. We will ask you again only when your choice expires or if we change our cookies in a way that requires a new choice.
Changing or withdrawing consent
You can change or withdraw your consent at any time with the “Cookie settings” link in the footer of every page. In your browser settings you can also delete cookies already stored and block cookies; some features may then stop working.
Links to other websites
Our pages link to other websites, such as Whop’s checkout, the platforms mentioned in the Kit and the sources we cite. Those websites use their own cookies under their own policies, which we do not control.
Contact
For questions about this policy, write to info@maximumprotection.online.