cookie protection + bump