LEGAL / DRAFT TEMPLATE

Cookie notice

Template — complete before launch. Fields in [square brackets] need your details and policy decisions. This document is a draft, not finalized legal terms.

What browser storage does

Cookies and browser storage can keep you signed in, protect requests or remember settings. Some technologies are necessary for a requested service; optional advertising or analytics require a separate assessment and, where applicable, prior consent.

Website session

The website uses an HttpOnly embed_account session cookie after login so the server can recognize your account. [CONFIRM ITS ACTUAL LIFETIME, DOMAIN, SECURITY ATTRIBUTES AND LOGOUT EXPIRY BEFORE FINALIZING]. Drupal account verification and password pages can use their own necessary session cookies.

Editor and payment services

The editor may store authentication and workspace preferences. Stripe checkout and its billing portal operate on Stripe pages and may use their own cookies or anti-fraud technologies. [INVENTORY THE ACTUAL COOKIE / STORAGE NAMES, PROVIDERS, PURPOSES AND DURATIONS ACROSS ALL DOMAINS].

Optional analytics and consent

This website release does not load Google Analytics or Google Tag Manager scripts. API Lite analytics settings alone do not activate a frontend tracker. [IF OPTIONAL TRACKERS ARE ADDED, DOCUMENT THEM AND PROVIDE ACCEPT / REJECT / WITHDRAW CONTROLS BEFORE LOADING THEM].

Managing storage

You can manage cookies using your browser’s settings and clear stored site data. Blocking necessary storage can prevent login or some requested features. [ADD A CONSENT-PREFERENCES LINK IF OPTIONAL TRACKERS ARE INTRODUCED]. For privacy questions contact [PRIVACY EMAIL].