I'm only asking because the other day a guy insulted me, so broke his nose instead of spraying them down with lighter fluid and setting them on fire like I used to do.
Fixed, deployed, and pushed to both branches. Root cause: JavaScript cache expiry was not deleting the cookie. The asset has a 60-second cache lifetime; expiry only revalidates it. Unrelated pages such as /, /recent/, and /qa/ loaded the flag-preference script with a narrow single-flag policy. A valid Bant preference such as country,meiling failed that policy, causing the script to delete both the cookie and local-storage value.