Cookie Notice
Effective November 2, 2026
Total Assault LLC uses cookies and related technologies for requested website functions, security, preferences and optional services. A provider can receive technical information even without setting a cookie. This notice complements our Privacy Policy.
Technologies and controls
| Technology | Purpose/provider | Duration and control |
|---|---|---|
PHPSESSID | Total Assault: Contact forms, CSRF/security and authorized sessions. | Browser-session cookie. Server-side state/physical cleanup is separate; the inactive-session cleanup target is 24 hours, not a guaranteed erasure time. Necessary requested functions. |
cc_cookie | Self-hosted CookieConsent v3: category choices, revision, timestamps and a random consent reference. | 180 days, browser-only. You can update or remove preferences; material revision changes can require a new choice. No server consent-evidence database. |
ta_analytics_optout | Total Assault: an Analytics refusal marker, including preservation of older refusals. | 180 days, browser-only. Stops automatic Analytics; an explicit later Analytics preference can remove it. |
| Cloudflare Turnstile and conditional security storage | Contact abuse prevention and website security. | Challenge/provider dependent. Security processing continues with optional categories rejected. A challenge may use temporary storage or conditional clearance state; not every request sets a cookie. |
| Cloudflare automatic Web Analytics | Cookie-free browser page/performance analytics as described by Cloudflare. | Existing regional collection excludes EU visitors and staging. It is independent of optional Google/media controls. Documented six-month data access window is not a permanent-deletion guarantee. |
_ga, _ga_G33Q0752NP | Google Analytics 4: approved public-page and sanitized Contact-outcome measurement. | Automatic only in verified California, Colorado or Texas unless opted out; prior permission required elsewhere or for an unknown location. Configured browser expiry: 180 days, without adapter-driven renewal. Event retention is separately 14 months with reset off. Withdrawal clears accessible GA cookies and disables future measurement. |
| YouTube player and provider storage | Requested privacy-enhanced YouTube playback. | External media permission plus a deliberate load action. No remote player/thumbnail from the gated component before permission; provider-dependent storage can occur after loading. |
The legacy device_view preference is no longer persisted on pages covered by the responsive consent implementation; an existing copy is expired there. Cookie names and security storage can change with provider behavior. Browser-cookie lifetime, application-state validity, reporting retention and provider erasure are different concepts.
Your choices
Accept All permits the available optional Analytics and External media categories. Reject Optional keeps them off. Customize lets you select categories. Necessary Contact, authentication and security functions remain available.
The regional default uses trusted, approximate IP-derived country/state headers. The UK, EEA, all other US states and every unresolved/unknown location remain opt-in. Previous Analytics refusals are preserved; geography never changes a refusal into permission. External media always requires permission plus deliberate loading.
Use the persistent Opt out of Analytics button to stop Google Analytics directly, or Cookie Settings to change or withdraw categories. Withdrawal disables future optional loading and removes loaded video players. Google withdrawal clears accessible analytics cookies; the site may reload to unload its runtime. On a Contact form, the current form is preserved and a clean page lifecycle occurs on navigation/submission instead. Withdrawal cannot recall requests already in flight or erase provider information already collected.
These controls do not gate Cloudflare's independent automatic Web Analytics. Its existing EU and staging exclusions remain. Reject Optional, Analytics withdrawal and the interface's GPC behavior do not turn that service off elsewhere. The Google/private-route exclusions cannot by themselves prevent a separately injected Cloudflare beacon. No manual EU opt-in tracking is implemented.
When Global Privacy Control is recognized, our interface keeps optional Google/media features off. This is not an all-provider tracking opt-out, and a recognized Do Not Track value of 1 also keeps Google Analytics off as a conservative site choice. These are not all-provider opt-outs. Browser settings can block or clear cookies, which can reset preferences. Media permission does not grant Analytics permission. Legacy Google Tag Manager, Universal Analytics and Meta Pixel remain inactive.
For a YouTube video, grant External media and then select Load this video. A direct YouTube link opens the provider's own website, where its terms and settings apply.
Contact
Privacy requests: [email protected]. Postal address: Total Assault LLC, 233 S Barrington Ave, Los Angeles, CA 90049. See our Privacy Policy for inquiry fields, providers, historical records, retention targets and applicable rights.