Cookie policy
Last updated: 29 October 2026
Technical cookies and storage
Essential storage includes login session, language, interface preferences and banner dismissal in localStorage. Hosting may set __cf_bm for bot protection and __dpl for deployment routing. Their lifetimes are controlled by hosting, not this app. The live audit also found an analytics session-id cookie and injected hosting scripts before consent; the app now blocks those optional script paths with a response security policy. Existing optional session-id cookies are removed on app startup. No new analytics or marketing integration has been added.
Choices and payment services
This banner is an essential-storage notice, not permission to track. Optional analytics remain blocked even after dismissal. Dismissal is stored locally until browser data is cleared. Stripe/Link may use cookies/storage needed for security and payment functionality when you open payment checkout; their notices apply there. If optional tracking is introduced, a prior, granular accept/reject consent mechanism is required.