Legal
Cookie and Tracking Notice
Not final. This page is a working draft written for review, not for reliance. Every item marked “To confirm” is a fact or a decision the client and its counsel still owe; nothing here has been reviewed for legal sufficiency, and the wording is expected to change. The site remains closed to the public while this stands. (Draft -- counsel to finalize.)
Effective date: To confirmeffective date
About This Notice
This notice explains how The Legends Collection ("the house") uses cookies and similar technologies on this website. It should be read together with the house's Privacy Policy To confirmcross-reference/link to Privacy Policy, which describes how personal information is collected and used more broadly. Continuing to use the site is agreement to the use of cookies described here, except where the law requires separate consent.
What Cookies Are and Why the House Uses Them
A cookie is a small text file that a website places on a visitor's device. Cookies let a site recognize a returning visitor, carry information across pages during a single visit, and support basic security checks, such as confirming that a form submission actually came from the site itself. The house uses cookies for these operational purposes: to keep a bidder or buyer signed in while placing a bid, making an offer, completing a Buy Now purchase, submitting a consignment, or reviewing an invoice, without requiring re-entry of information on every page, and to protect the site and its users against certain kinds of automated abuse.
Strictly Necessary Cookies Do Not Require Consent
Under applicable law, cookies that are strictly necessary to provide a service the visitor has requested do not require separate consent, because the site cannot deliver that service without them. The cookies described in this notice fall into that category: without them, a visitor could not remain signed in while bidding, making an offer, completing a purchase, or managing a consignment, and the site could not confirm that a submitted form actually came from the visitor's own session. For this reason, the house does not present a banner offering to turn these cookies off. A visitor can still disable them through browser settings, with the consequences described below.
The Cookies the House Uses
| Cookie | Purpose category | What it does | Strictly necessary? | Rough duration |
|---|---|---|---|---|
| To confirmexact session cookie name | Authentication / session state | Keeps a visitor signed in and preserves in-progress activity (a bid, an offer, a checkout, a consignment submission) while moving between pages | Yes | To confirmexact duration, e.g., session-only or N days |
| To confirmexact CSRF cookie name | Security | Confirms that a form submission (bid, offer, purchase, consignment submission, account or password change) originated from the house's own site and the visitor's own session, to prevent forged submissions | Yes | To confirmexact duration |
The house's optional two-factor authentication (a TOTP-based, app-generated code) is a login step, not a separate tracking technology; it does not set an additional cookie beyond the session cookie above. To confirmconfirm no additional cookie is set by the 2FA flow
The house does not use a cookie to enforce rate limits on the site. Rate limiting is applied server-side, based on the incoming request, and does not depend on anything stored on a visitor's device.
Third-Party Operational Cookies, Including at Checkout
The site is served through Cloudflare, which also delivers images from Cloudflare R2 storage. Cloudflare may set its own operational cookies as part of delivering and securing the site, for example to help distinguish legitimate visitors from automated traffic. Those cookies are set and controlled by Cloudflare, not by the house directly. To confirmlist any specific Cloudflare cookie names the house has confirmed, e.g., __cf_bm, cf_clearance, if applicable
When a visitor completes a purchase, the house's payment processor, To confirmname of payment processor, may set its own cookies as part of processing the payment and screening for fraud. Those cookies are governed by the payment processor's own privacy and cookie disclosures, available at To confirmlink to payment processor's privacy/cookie policy, not by this notice.
The house's error-monitoring tool, Sentry, is used to capture technical errors so the house can diagnose and fix problems with the site. Sentry is configured to strip cookies, the Authorization header, X-Forwarded-For, the visitor's remote IP address, and the user's email address before an error report is stored, so error monitoring does not retain a visitor's cookies or other identifying request data.
No Advertising or Cross-Site Tracking
The house does not use advertising cookies or cross-site behavioural tracking, and is not aware of any such technology operating on the site. The house does not sell or share cookie data for cross-context behavioural advertising. To confirmconfirm whether any analytics product is in use — if added later this notice and the Privacy Policy must both be updated
Your Browser Controls
Most browsers let a visitor view, delete, and block cookies through their settings, and can be set to prompt before a cookie is placed. Because the cookies described above are strictly necessary, blocking or deleting them affects the site directly: a visitor who blocks the session cookie will likely be unable to stay signed in while bidding, making an offer, completing a purchase, or submitting a consignment, and a visitor who blocks the CSRF cookie may be unable to submit forms on the site at all. Blocking Cloudflare's cookies or the payment processor's checkout cookies may similarly interfere with browsing the site or completing a purchase.
Do Not Track and Global Privacy Control
Some browsers send a "Do Not Track" signal, and some browsers and browser extensions send a Global Privacy Control ("GPC") signal. To confirmconfirm GPC handling — counsel to verify against CCPA/CPRA obligations
Changes to This Notice
The house may update this notice from time to time, including to reflect a change in the cookies it uses or in applicable law. The version posted on this page is the current one. To confirmdescribe how material changes will be communicated, if at all, beyond updating the effective date above
Contact
Questions about this notice or about the house's use of cookies can be directed to To confirmcontact name or department, at To confirmcontact email, or by mail at To confirmmailing address.
(Draft -- counsel to finalize.)