Free Design Preview

Legal

Cookie policy.

Two cookies, both needed to make a form work. No analytics, no trackers, nothing loaded from anyone else — and here is the check behind that.

Last updated October 18, 2026. All legal documents

Draft, not yet reviewed by a lawyer. Accurate to how we work, but it has not had a legal review. Need something confirmed in writing? Email us.

The short version

This site sets two cookies. Both are there to make a form work, both expire after two hours, and neither one follows you anywhere. There is no analytics, no advertising tag and nothing loaded from another company on any page of this site.

The two cookies

  • get-shielded-usa-session — keeps your session while you move between pages, so a form you submit arrives carrying the answers you typed. Expires after two hours. Not readable by scripts.
  • XSRF-TOKEN — proves a form was submitted from this site and not from somewhere else. Without it a submission is refused. Expires after two hours. Readable by this site’s own script.

Both are first-party, both are set by this website itself, and neither carries an identifier that means anything anywhere else. They are what the law calls strictly necessary — the forms do not work without them — which is why there is nothing here to opt into.

What we checked, and when

On October 18, 2026 we loaded every page of this site in a clean browser with no history, scrolled each one to the bottom, submitted a form, and recorded what happened. The result:

  • Cookies set: the two above, and nothing else, first-party or third-party.
  • Local storage and session storage used: none.
  • Requests to other companies’ servers: none. Not one.
  • Scripts loaded: one, from our own domain, under a kilobyte compressed, which opens the menu and filters the portfolio. It stores nothing.

Because there is nothing to consent to. Consent banners exist to cover tracking, and neither of these cookies tracks anybody — one keeps your place for two hours and the other stops a forged form submission. Asking permission to run a form would be theater.

Things other sites use that this one does not

  • Google Analytics, or any other analytics
  • Google Fonts — our fonts are served from our own domain, so no font provider sees your IP address
  • Meta Pixel, advertising tags and retargeting
  • Heatmaps, session recording and scroll tracking
  • Embedded video, maps and social widgets, each of which sets cookies of its own
  • Content delivery networks that would see every visitor

Managing cookies in your browser

Every browser lets you block or delete cookies, and you are welcome to. Everything here that is only for reading works with them blocked. The forms do not: without those two we cannot tell your submission apart from a forged one, so we refuse it. That is a security measure, not a way of making you accept something.

If that changes

If we ever add analytics, an embed or anything else that sets a cookie of its own, this page is updated before it goes live, not after, and a consent banner appears with it. The date at the top is how you check.

Contact

Questions about anything on this page go to contact@getshieldedusa.com or on WhatsApp at +1 (949) 712-5350 (messages only), answered 24/7. Written correspondence: Get Shielded USA, 600 Anton Blvd Ste 640, Costa Mesa, CA 92626. We operate from Santa Ana, California.