Legal & Policy Hub

This Cookie Policy explains what cookies and similar browser storage the Alto Lusso website uses, why we use them, and the choices you have. It applies to the Alto Lusso website only.

1. What Are Cookies. Cookies are small text files a website stores in your browser. Similar technologies, such as your browser's session storage, work in a comparable way and are covered by this policy.

2. Cookies We Set When You Sign In. These are strictly necessary to keep you signed in and to protect your account. They are HttpOnly (page scripts cannot read them), sent only over HTTPS, and only sent to our own site (SameSite Strict). They are not used for advertising or tracking.

access_token and id_token: prove that you are signed in. They expire shortly after they are issued and are refreshed while you stay signed in.

refresh_token: lets us keep you signed in without asking for your password again. It lasts up to 30 days, or until you log out.

portal: remembers whether you signed in to the Social Casino or Sweepstakes side of your account. It lasts up to 30 days, or until you log out.

mfa_pending: holds your place for a few minutes while you enter the two-step verification code emailed to you. It expires after 5 minutes.

3. Security and Bot Protection. We use Cloudflare to protect the website and Cloudflare Turnstile to check that sign-up, sign-in, and contact forms are used by people and not automated software. Cloudflare may set its own cookies or use browser storage for this purpose. These are used for security and are governed by Cloudflare's own privacy policy.

4. Browser Session Storage. We use your browser's session storage to briefly remember things like a sign-up you are in the middle of confirming and recently loaded account information, so pages load faster. This data stays in your browser, is not sent to advertisers, and is cleared when you close the tab. We also use your browser's local storage to remember that you have dismissed the cookie notice, so we do not ask you again.

5. What We Do Not Use. We do not use advertising or remarketing cookies, social media tracking pixels, or third-party analytics or tag manager scripts on this website. Our hosting providers may keep standard server logs, such as IP address and pages requested, for security and to keep the service running.

6. Your Choices. You can block or delete cookies in your browser settings. Because the cookies listed in section 2 are needed to sign in, blocking them will stop you from being able to log in or use your account. Your browser may also let you clear session storage by closing the tab or clearing site data.

7. Changes to This Policy. We may update this Cookie Policy if the cookies we use change. The date at the top shows when it was last updated.

8. Contact Us. If you have questions about this policy, contact us through the Support page.