Cookie Policy
Last updated: June 2026
This policy explains what cookies In The Black uses, why we use them, and what we do not use them for. In The Black is operated by Weber&Co Ltd, an Ontario corporation.
1. What Are Cookies
Cookies are small text files that a website stores on your browser or device when you visit. They are commonly used to keep you logged in, remember your preferences, and — on many commercial sites — track your behaviour across the web for advertising purposes.
In The Black uses a minimal set of cookies strictly required for the platform to function. We do not use advertising cookies, behavioural tracking cookies, or third-party analytics cookies.
2. Cookies We Set
Session cookie — itb_token
| Purpose | Keeps you signed in to In The Black. |
|---|---|
| Type | HttpOnly, Secure, SameSite=Lax — this cookie is completely inaccessible to JavaScript running in your browser. It can only be read by the server. No browser extension, injected script, or third party can ever read its contents. |
| Contents | A signed JSON Web Token (JWT) containing your user ID and email address. The token is signed with a secret key held only by our servers. |
| Duration | 7 days from your last sign-in. Extended each time you visit while logged in. Removed immediately when you sign out. |
| Shared with third parties? | No. |
Security cookie — _csrf
| Purpose | Protects your account against cross-site request forgery (CSRF) attacks — a class of attack where another website tricks your browser into making requests to In The Black on your behalf without your knowledge. |
|---|---|
| Type | HttpOnly, Secure, SameSite=Strict — scoped to this domain only. Cannot be sent or read cross-site. |
| Contents | A random token. Your browser sends this token on every state-changing request (sign in, save progress, update your profile). Our server verifies it matches before processing the request. An attacker on another domain cannot read or reproduce this token. |
| Duration | Session (removed when you close your browser). |
| Shared with third parties? | No. |
3. What We Do Not Use
- Analytics cookies — we do not use Google Analytics, Adobe Analytics, or any other third-party analytics service that sets cookies on your device. Any product analytics we collect are server-side and attached to your account, not tracked via your browser.
- Advertising or targeting cookies — we do not run ads and we do not share data with advertising networks. No Facebook Pixel, no Google Ads tags, no retargeting scripts.
- Third-party social cookies — we do not embed social sharing buttons or widgets that set cookies from third-party domains.
- Fingerprinting — we do not use browser fingerprinting or any other cross-site tracking technique.
4. Local Storage
In addition to cookies, In The Black uses your browser’s localStorage to remember UI preferences such as collapsed sections, dismissed banners, and theme selection. This data stays on your device and is never transmitted to our servers.
5. Managing Cookies
Because the two cookies described above are strictly necessary for the platform to function, there is no opt-out for them while you use In The Black. Blocking or deleting them will prevent you from signing in.
You can delete all cookies set by In The Black at any time through your browser settings. This will sign you out of your account. Your account data is stored on our servers — it is not affected by deleting cookies.
6. Changes to This Policy
If we add new cookies — for example, if we introduce a third-party analytics service in future — we will update this policy before those cookies are set, and notify you via email if the change is material. The date at the top of this page reflects when the policy was last changed.
7. Contact
Questions about cookies or privacy can be sent to privacy@intheblackpf.com.