Professor Thorsten Polleit

Name	Provider	Purpose	Expiration
_cf_bm	Cloudflare	Identifies and blocks automated bot traffic to protect the website from abuse and attacks.	30 minutes
cf_clearance	Cloudflare	Stores proof that a visitor passed a security or CAPTCHA check to access protected pages.	1 year
AWSALBTG	Amazon Web Services	Load balancing cookie to ensure website stability and performance.	7 days
AWSALBTGCORS	Amazon Web Services	Used by AWS to maintain user sessions and route traffic to the correct server.	7 days
__stripe_mid	Stripe	Fraud prevention and secure payment processing.	1 year
__stripe_sid	Stripe	Maintains payment session security and fraud protection.	30 minutes
m	Stripe	Used for fraud detection and payment security.	2 years
hmt_id	hCaptcha	Distinguishes human users from bots for website security.	1 year
ab_experiment_sampled	Substack	Used to test different versions of site content.	1 year
ab_testing_id	Substack	Identifies which version of the website a user sees.	1 year
ajs_anonymous_id	Substack	Assigns an anonymous visitor ID used by Substack to recognise repeat visitors and track interactions with embedded newsletters.	1 year
disable_experiments	Substack	Stores whether experimental features are enabled.	Session
disable_html_pixels	Substack	Controls tracking pixels inside embedded newsletters.	Session
NID	Google Pay	Used when processing Google Pay transactions and for fraud prevention.	6 months
__cflb	Cloudflare	Maintains load-balancer routing to ensure requests go to the same backend server.	1 day
moove_gdpr_popup	Moove	Storing cookie settings data.	30 days

_cf_bm

Cloudflare

Identifies and blocks automated bot traffic to protect the website from abuse and attacks.

30 minutes

cf_clearance

Cloudflare

Stores proof that a visitor passed a security or CAPTCHA check to access protected pages.

1 year

AWSALBTG

Amazon Web Services

Load balancing cookie to ensure website stability and performance.

7 days

AWSALBTGCORS

Amazon Web Services

Used by AWS to maintain user sessions and route traffic to the correct server.

7 days

__stripe_mid

Stripe

Fraud prevention and secure payment processing.

1 year

__stripe_sid

Stripe

Maintains payment session security and fraud protection.

30 minutes

m

Stripe

Used for fraud detection and payment security.

2 years

hmt_id

hCaptcha

Distinguishes human users from bots for website security.

1 year

ab_experiment_sampled

Substack

Used to test different versions of site content.

1 year

ab_testing_id

Substack

Identifies which version of the website a user sees.

1 year

ajs_anonymous_id

Substack

Assigns an anonymous visitor ID used by Substack to recognise repeat visitors and track interactions with embedded newsletters.

1 year

disable_experiments

Substack

Stores whether experimental features are enabled.

Session

disable_html_pixels

Substack

Controls tracking pixels inside embedded newsletters.

Session

NID

Google Pay

Used when processing Google Pay transactions and for fraud prevention.

6 months

__cflb

Cloudflare

Maintains load-balancer routing to ensure requests go to the same backend server.

1 day

moove_gdpr_popup

Moove

Storing cookie settings data.

30 days

Professor Thorsten Polleit.

The IEA is an educational charity and free market think tank.