Cookie Policy

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners useful information.

Similar technologies include:

• Local Storage: Similar to cookies but can store more data
• Session Storage: Temporary storage that is cleared when you close your browser
• Pixels/Web Beacons: Tiny graphics used to track user behavior

2. How We Use Cookies

2a. Cookie Inventory Summary

The following table provides a complete inventory of all cookies and storage items used by GreatLibrary.AI, including consent requirements and security attributes.

Total cookies: 12 (5 necessary, 2 functional, 3 analytics, 0 marketing). Total local storage items: 3 (all necessary). This inventory was last audited on April 23, 2026 and is reviewed whenever cookies are added or removed.

2b. Cookie Data Access Matrix

The following table clarifies exactly what personal data each cookie category can access. This transparency measure satisfies GDPR Article 13(1)(e) disclosure requirements and helps you make informed consent decisions.

2b.1 Preference Center State Persistence

Your cookie preferences are persisted using the following mechanisms to ensure they survive across sessions and devices:

• Primary storage: Your choices are saved in the gl_cookie_prefs cookie and gl_cookie_consent local storage entry. Both are set simultaneously for redundancy
• Fallback behavior: If cookies are cleared but local storage persists (or vice versa), the preference center restores your last known preference from whichever store is available
• Cross-device limitation: Cookie preferences are per-browser and per-device. If you use multiple browsers or devices, you will need to set your preferences on each one separately. We do not synchronize cookie preferences across devices
• State display: When you visit this page, the preference panel below reflects your current saved state. If no preference has been set, all non-essential categories default to "Off" (consent-by-default approach per GDPR)
• Save confirmation: When you toggle a preference, a confirmation message appears confirming the change has been saved. Changes take effect immediately -- no page reload is required

3. Your Cookie Choices

3.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can:

• Block all cookies
• Block third-party cookies only
• Delete cookies when you close your browser
• Receive a warning before cookies are stored

Below are step-by-step instructions for managing cookies in the most common desktop browsers. For mobile browsers, see Section 9d.

3.1.1 Google Chrome

1. Click the three-dot menu in the top-right corner and select Settings
2. In the left sidebar, click Privacy and security
3. Click Third-party cookies to control cross-site tracking cookies
4. To clear existing cookies: click Delete browsing data, select Cookies and other site data, and click Delete data
5. To manage per-site cookies: under Third-party cookies, scroll to Customized behaviors to add sites that can always or never use cookies

Full guide: Google Chrome cookie settings

3.1.2 Mozilla Firefox

1. Click the hamburger menu and select Settings
2. Click Privacy & Security in the left sidebar
3. Under Enhanced Tracking Protection, choose Standard, Strict, or Custom. Strict mode blocks most third-party cookies automatically
4. To clear existing cookies: scroll down to Cookies and Site Data and click Clear Data
5. To manage per-site cookies: click Manage Exceptions to allow or block cookies for specific sites

Full guide: Firefox cookie settings

3.1.3 Apple Safari (macOS)

1. Open Safari and go to Safari > Settings (or Preferences)
2. Click the Privacy tab
3. Check Prevent cross-site tracking to block third-party cookies
4. To clear existing cookies: click Manage Website Data, search for "greatlibrary" or "omnilib", and click Remove (or Remove All to clear all site cookies)

Full guide: Safari cookie settings

3.1.4 Microsoft Edge

1. Click the three-dot menu and select Settings
2. Click Cookies and site permissions in the left sidebar
3. Click Manage and delete cookies and site data
4. Toggle Block third-party cookies to prevent tracking cookies
5. To clear existing cookies: go to Settings > Privacy, search, and services > Clear browsing data, select Cookies and other site data, and click Clear now
6. To manage per-site cookies: under Cookies and site permissions, use the Allow and Block lists

Full guide: Edge cookie settings

3.1.5 Brave

1. Click the hamburger menu and select Settings
2. Click Shields in the left sidebar
3. Under Trackers & ads blocking, select Aggressive for maximum cookie protection
4. Brave blocks third-party cookies by default and supports Global Privacy Control (GPC) natively -- see Section 4
5. To clear existing cookies: go to Settings > Privacy and security > Clear browsing data

3.2 Opt-Out Tools

You can opt out of certain tracking:

• Google Analytics: Install the Google Analytics Opt-out Browser Add-on
• Interest-based advertising: Visit Digital Advertising Alliance or Your Online Choices (EU)

3.3 Impact of Disabling Cookies

The following table shows the specific impact of disabling each cookie category:

What happens to site functionality when each cookie category is disabled

Cookie Category	Can Be Disabled?	Impact of Disabling
Essential	No	Without essential cookies, you cannot log in, submit forms, or use any authenticated features. The site will not function.
Functional	Yes	Your theme preference (dark/light mode) and language preference will not be remembered between sessions. You will need to set them each time you visit.
Analytics	Yes	No impact on site functionality. We will have less data about how users interact with the site, which may slow our ability to identify and fix usability issues.
Marketing	Yes	No impact. We do not currently use marketing cookies. This category is reserved for future use.

If you block all cookies through your browser settings (including essential cookies), you will not be able to sign in to your account or use authenticated features of the Service.

Our recommendation: For the best balance between privacy and functionality, we recommend keeping essential cookies enabled (they are strictly necessary and contain no tracking data), enabling functional cookies if you want your display preferences remembered, and disabling analytics and marketing cookies if you prefer not to be measured. You can configure this exact setup using the preference center below.

4. Do Not Track and Global Privacy Control Signals

We recognize the following browser-level privacy signals:

4.1 Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out request. When your browser sends a GPC signal (Sec-GPC: 1 header or navigator.globalPrivacyControl === true):

• We treat it as a request to opt out of the sale or sharing of personal data, as required by the CCPA/CPRA, Colorado CPA, Connecticut CTDPA, and other applicable state privacy laws
• Analytics cookies and functional cookies that are not strictly necessary will not be set, equivalent to selecting "Reject Non-Essential" on our cookie banner
• The cookie consent banner will not appear, as your browser-level preference takes precedence
• This preference applies to the browsing session in which GPC is detected; if you later disable GPC, the standard cookie banner will reappear

You can enable GPC in supported browsers (Firefox, Brave, DuckDuckGo) or through browser extensions. For more information, visit globalprivacycontrol.org.

4.2 Do Not Track (DNT)

The legacy "Do Not Track" (DNT) browser header does not have a universally agreed-upon standard. While we do not modify our behavior based on the DNT header alone, we encourage users who wish to limit tracking to:

• Use GPC instead, which has clear legal backing and is honored by our platform
• Use the cookie preference controls in Section 9 below to granularly control which cookies are active
• Use browser settings to block third-party cookies (see Section 3.1)

4.3 DNT vs. GPC Comparison

The following table compares the two browser privacy signals and how GreatLibrary.AI responds to each.

4.4 Your Privacy Signal Status

The following shows the privacy signals currently detected from your browser.

5. Legal Basis for Cookies

5a. Consent Record Keeping

In accordance with the GDPR principle of accountability (Art. 5(2)), we maintain records of cookie consent to demonstrate compliance. The following information is recorded when you make a consent choice:

What information we record when you make a cookie consent choice

Record Element	Details	Retention
Consent choice	Which categories you accepted or rejected (essential only, all, or custom selection)	1 year from date of consent
Date and time of consent	ISO 8601 timestamp when you made your cookie choice	1 year from date of consent
Version of cookie policy	The version of this Cookie Policy that was in effect when consent was given	1 year from date of consent
Method of consent	Whether consent was given via the cookie banner, the preference controls on this page, or inferred from a GPC signal	1 year from date of consent

Consent records are stored locally in your browser (via Local Storage) and are not transmitted to our servers unless required for compliance verification. You may request a copy of your consent record by contacting privacy@greatlibrary.ai.

5b. Cookie Lifespan and Renewal

Your cookie consent preference expires and must be renewed after 12 months. When your consent expires:

• The cookie consent banner will reappear on your next visit
• No non-essential cookies will be set until you make a new choice
• Your previous preference is not automatically restored -- you must actively consent again

This renewal requirement ensures that your consent remains informed and up-to-date, particularly if our cookie practices have changed since you last consented. This approach aligns with guidance from the European Data Protection Board (EDPB Guidelines 05/2020 on Consent) and the UK ICO.

5c. Cookie Lifecycle: Session vs. Persistent Cookies

Cookies on GreatLibrary.AI fall into two categories based on how long they persist on your device:

Session Cookies

Session cookies are temporary and exist only while your browser is open. They are created when you visit the site and are automatically deleted when you close your browser (or browser tab, depending on your browser's session handling). On our platform, session cookies include:

• session -- Created when you log in or visit any page. Stores a server-side session identifier. Deleted when you close your browser or after server-side timeout (typically 12 hours of inactivity).
• csrf_token -- Created when any page with a form loads. Used to validate form submissions against cross-site request forgery. Deleted when you close your browser.

Persistent Cookies

Persistent cookies remain on your device for a set period or until you manually delete them. They are re-read each time you return to the site. On our platform, persistent cookies include:

Lifecycle details for persistent cookies including creation triggers and expiry

Cookie	Created When	Expires After	Renewed When
remember_token	You select "Remember me" during login	30 days	Each successful login with "Remember me" checked
gl_cookie_consent	You interact with the cookie consent banner	1 year	Each time you update your cookie preferences
gl_cookie_prefs	You set granular cookie category preferences	1 year	Each time you update category preferences
theme	You switch between dark and light mode	1 year	Each time you change theme preference
_ga	First page load after analytics consent is given	2 years	Each new visit (expiry timer resets)
_gid	First page load after analytics consent is given	24 hours	Each new visit within 24 hours

How to delete persistent cookies: You can delete persistent cookies at any time through your browser settings. See Section 3 (desktop) or Section 9d (mobile) for browser-specific instructions. Deleting cookies will sign you out and reset your preferences.

5d. How the Consent Banner Works

When you first visit GreatLibrary.AI (or after your consent expires), a cookie consent banner appears at the bottom of the screen. Here is exactly what happens at each step:

1. Banner appears: A non-intrusive banner slides up from the bottom of the page. At this point, only strictly necessary cookies are active. No analytics, functional, or marketing cookies have been set.
2. Your options:
   • "Manage Preferences" -- Opens a granular preference panel directly within the banner. You can toggle individual cookie categories (essential, functional, analytics, marketing) independently without leaving the page. Essential cookies are always active and cannot be disabled. Click "Save Preferences" to apply your choices.
   • "Accept All" -- Consents to all cookie categories. Functional, analytics, and marketing cookies are activated immediately. Google Analytics begins collecting anonymized usage data.
   • "Reject Non-Essential" -- Only strictly necessary cookies remain active. No third-party cookies are set. Your browsing data is not shared with analytics providers.
   • "Customize" -- Links to this Cookie Policy page (Section 9) where you can view detailed descriptions and toggle individual categories using the preference controls below.
3. Choice is recorded: Your preference is stored in the gl_cookie_consent cookie (value: "all", "essential", or "custom") and the timestamp is stored in localStorage as gl_cookie_consent_date. Your per-category choices are stored in localStorage as gl_cookie_categories (JSON object with boolean values for each category).
4. Banner disappears: The banner is hidden for the duration of your consent (1 year). It will not reappear unless you clear your cookies or your consent expires.
5. Changing your mind: You can update your preferences at any time by: (a) visiting this page (/cookies, Section 9) and using the cookie preference controls; or (b) going to Settings and clicking "Manage Cookies" in the Legal section to reopen the consent banner with your current selections pre-filled. Changes take effect immediately -- if you revoke analytics consent, analytics cookies are deleted and no further data is collected.

Technical note: Our implementation follows the "consent-before-cookies" model required by the EU ePrivacy Directive and UK PECR. Non-essential cookie scripts are not loaded until explicit consent is received, rather than being loaded and then deleted upon rejection.

6. Updates to This Policy

We may update this Cookie Policy from time to time. When we make material changes to the cookies we use or how we use them:

• We will update the "Last updated" date at the top of this page
• We will reset your cookie consent preference so that the consent banner reappears, allowing you to make an informed choice based on the updated policy
• If we introduce new cookie categories or new third-party cookies, we will seek fresh consent before setting them

We encourage you to review this policy periodically.

7. Contact Us

If you have questions about our use of cookies, please contact us:

• Privacy inquiries: privacy@greatlibrary.ai
• General support: support@greatlibrary.ai
• Data Protection Officer: dpo@greatlibrary.ai

Company: Alexandria AI Systems

8. More Information

For more information about cookies and how to manage them, visit:

• All About Cookies
• UK Information Commissioner's Office
• European Data Protection Board (EDPB) Guidelines

8.1 Cookie Audit Schedule

We conduct regular audits of all cookies and similar technologies used on our platform to ensure accuracy of this policy and compliance with applicable regulations. Our audit schedule is as follows:

• Last full audit: April 14, 2026 -- all cookies and local storage items were verified against this policy
• Next scheduled audit: July 2026
• Audit frequency: Quarterly, or whenever we add a new third-party integration or cookie
• Audit scope: All first-party cookies, third-party cookies, local storage items, and session storage items are reviewed for accuracy of purpose description, duration, and consent classification
• Audit findings: Any discrepancies found during an audit result in immediate correction of this policy and, if the change is material, a consent reset requiring users to re-consent

9. Manage Your Cookie Preferences

You can change your cookie preferences at any time using the controls below. Essential cookies cannot be disabled as they are required for the website to function. You may toggle functional and analytics cookies independently.

9.1 Consent Mechanism

When you first visit our website, a cookie consent banner appears at the bottom of the screen. This banner gives you two immediate options:

• Accept All: Enables all cookie categories (strictly necessary, functional, analytics, and marketing)
• Reject Non-Essential: Enables only strictly necessary cookies. No functional, analytics, or marketing cookies are set

For more granular control, visit this page to toggle individual cookie categories using the preference panel below. Your consent choice is stored in your browser via a gl_cookie_consent cookie and gl_cookie_consent_date local storage entry, and remains valid for 1 year unless you change it. You may withdraw or modify your consent at any time by returning to this page.

9.2 Cookie Preference Controls

9.3 Cookie Scanner

This tool scans your browser and shows which cookies are currently set by GreatLibrary.AI on your device. It runs entirely in your browser -- no data is sent to our servers. Use this to verify which cookies are active and confirm that your preferences are being respected.

9a. Consent Renewal

Your cookie consent preference is stored for a period of 1 year from the date you set it. After this period expires:

• Automatic re-prompt: When your consent preference expires, the cookie consent banner will reappear on your next visit, giving you the opportunity to review and update your choices
• No assumption of consent: Expired consent is treated the same as no consent -- only strictly necessary cookies will be active until you make a new selection
• Preference preservation: Your previous preference settings are retained in local storage as a convenience, so if you choose to accept the same settings again, they will be pre-selected in the preference panel
• Policy changes: If we make material changes to our cookie practices (such as adding new cookie categories or third-party providers), we will reset consent records and re-prompt all users, even if their consent has not yet expired

You do not need to wait for consent to expire to update your preferences -- you can change them at any time using the controls in Section 9.2 above.

9b. Google Consent Mode v2

In compliance with Google's EU User Consent Policy and the Digital Markets Act (DMA), our implementation of Google Analytics respects consent signals through the following mechanisms:

• Default state: Google Analytics tags are configured to default to a denied consent state for analytics_storage and ad_storage. No analytics cookies are set until the user provides explicit consent
• Consent update: When a user accepts analytics cookies (via the cookie banner or preference controls), the consent state is updated to allow analytics_storage, enabling Google Analytics to function with full measurement capabilities
• Cookieless pings: When analytics consent is denied, Google may still receive cookieless pings (without personal identifiers) for basic measurement modeling. These pings do not set cookies on the user's device and do not contain personally identifiable information
• Ad storage: We do not use Google Ads or remarketing features. The ad_storage consent signal remains denied at all times
• Region-specific behavior: Consent defaults are applied globally, not just for EEA/UK users, as a privacy-protective measure

For more information about how Google processes data with consent mode, see Google's Consent Mode documentation.

9c. Third-Party Cookie Details

The following third-party services may set cookies on your device when you use GreatLibrary.AI. We provide details about each service, what data they collect, and how to manage their cookies independently.

9c.0 Third-Party Data Flow Summary

When third-party cookies are active on GreatLibrary.AI, the following data may leave your browser and be transmitted to third-party servers. This table is provided for transparency under GDPR Article 13(1)(e) and the ePrivacy Directive.

Sentry and Redis/Upstash do not set cookies on your device and are not included in this table. Sentry receives server-side error data with PII automatically scrubbed. Redis stores only ephemeral rate-limiting counters with no PII. See sections 9c.5 and 9c.6 below for details.

CDN services (no cookies): Google Fonts (fonts.googleapis.com) and Tailwind CSS CDN (cdn.tailwindcss.com) are loaded on every page to deliver fonts and styling. These services receive standard HTTP request headers (IP address, user-agent, referrer URL) but do not set cookies on your device. Google states that font requests are not logged or used for tracking (Google Fonts Privacy FAQ).

For the full details of our international data transfer safeguards, see our Privacy Policy, Section 8 (International Data Transfers).

9c.1 Google Analytics

Google Analytics cookie details

Cookie	Domain	Data Collected	Retention	Opt-Out
_ga	.greatlibrary.app	Anonymized visitor ID, page views, session duration, referral source	2 years	Google Analytics Opt-out Browser Add-on
_gid	.greatlibrary.app	Session-level visitor distinction	24 hours
_gat	.greatlibrary.app	None (rate limiting only)	1 minute

Data processing location: Google servers (US and EU). Google is certified under the EU-US Data Privacy Framework. See Google's Privacy Policy.

IP anonymization: We use Google Analytics with IP anonymization enabled (anonymize_ip: true), which truncates the last octet of your IP address before storage.

9c.2 Stripe (Payment Processing)

Stripe may set cookies when you interact with payment forms (checkout, subscription management, customer portal). These cookies are classified as strictly necessary for payment processing and do not require consent.

Stripe cookie details

Cookie	Domain	Purpose	Retention
__stripe_mid	.stripe.com	Fraud detection and prevention	1 year
__stripe_sid	.stripe.com	Session identifier for payment forms	30 minutes

See Stripe's Privacy Policy and Stripe's Cookie Settings.

9c.3 Google OAuth

If you sign in using Google, Google may set temporary cookies during the OAuth authentication flow. These are strictly necessary for the login process and expire when the authentication is complete.

See Google's Cookie Policy.

9c.4 Microsoft OAuth

If you sign in using Microsoft, Microsoft may set temporary cookies during the OAuth authentication flow. These are strictly necessary for the login process.

See Microsoft's Privacy Statement.

9c.5 Sentry (Error Monitoring)

Sentry does not set cookies on your device. Sentry collects error reports server-side and may receive the following anonymized metadata when application errors occur:

• Browser metadata: Browser type and version, operating system, device type (desktop/mobile/tablet)
• Error context: Stack traces, error messages, and request URLs that triggered the error (with PII automatically scrubbed)
• Session context: Anonymized session identifiers to correlate errors within a single browsing session

PII scrubbing: Our Sentry configuration uses custom data scrubbing rules that automatically redact email addresses, IP addresses, authentication tokens, and other personally identifiable information from error reports before transmission. We have configured Sentry with send_default_pii = False and additional custom scrubbing rules for breadcrumb data.

See Sentry's Privacy Policy.

9c.6 Redis / Upstash (Rate Limiting)

Redis (provided by Upstash) does not set cookies on your device. Redis is used server-side for rate limiting and session caching. It stores only ephemeral request counters (keyed by anonymized identifiers) to enforce API rate limits and prevent abuse. No personally identifiable information, user content, or browsing history is stored in Redis. Rate limiting data expires automatically within minutes.

9d. Mobile Cookie Management

Managing cookies on mobile devices works differently from desktop browsers. Below are instructions for the most common mobile browsers.

9d.1 iOS Safari

1. Open Settings on your iPhone or iPad
2. Scroll down and tap Safari
3. Under Privacy & Security:
   • Toggle Prevent Cross-Site Tracking to block third-party cookies
   • Toggle Block All Cookies to block all cookies (note: this may prevent login)
4. To clear existing cookies: tap Clear History and Website Data
5. To delete cookies for GreatLibrary.AI only: go to Settings > Safari > Advanced > Website Data, search for "greatlibrary" or "omnilib", and swipe to delete

9d.2 Android Chrome

1. Open Chrome on your Android device
2. Tap the three-dot menu and select Settings
3. Tap Privacy and security then Third-party cookies
4. Choose Block third-party cookies or Block all cookies
5. To clear existing cookies: go to Settings > Privacy and security > Clear browsing data, select Cookies and site data, and tap Clear data
6. To manage per-site cookies: go to Settings > Site settings > Cookies, then search for "greatlibrary" or "omnilib"

9d.3 Samsung Internet

1. Open Samsung Internet and tap the menu icon
2. Go to Settings > Privacy and security
3. Tap Accept cookies to toggle cookie acceptance
4. Tap Delete browsing data to clear cookies

9d.4 Firefox Mobile (iOS and Android)

1. Open Firefox and tap the menu icon
2. Go to Settings > Privacy (iOS) or Settings > Enhanced Tracking Protection (Android)
3. Set the protection level to Strict to block most third-party cookies
4. To clear cookies: Settings > Data Management > Clear Private Data (iOS) or Settings > Delete browsing data (Android)

Note: Blocking all cookies may prevent you from logging in to GreatLibrary.AI. We recommend keeping essential cookies enabled (which are set by our domain) while blocking third-party cookies if you prefer minimal tracking.

10. Version History

Version history showing date and summary of changes for each revision

Version	Date	Summary of Changes
5.1	May 2, 2026	Third-party services disclosure (Section 2): added Sentry (error monitoring), Google Fonts (font delivery CDN), and Tailwind CSS CDN (CSS framework delivery) to the Third-Party Cookies table. All three services make network requests on page load that transmit standard HTTP headers (IP address, user-agent). Disclosure required under GDPR Art. 13 and ePrivacy Directive for transparency about all external data recipients
4.9	April 30, 2026	Compliance review cycle: updated version badge and review date to April 30, 2026. Verified cookie inventory accuracy (12 cookies, 3 local storage items). Confirmed cookie consent banner meets GDPR granular consent requirements with separate accept/reject controls and cookie policy link
4.8	April 23, 2026	Fixed heading hierarchy for WCAG 1.3.1 compliance: converted browser-specific cookie management sub-sections (3.1.1-3.1.5) from h3 to proper h4 elements, eliminating heading level skips under h3 parent. Added h4 styling for screen and print
4.7	April 23, 2026	Added DNT vs GPC comparison table (Section 4.3) showing signal mechanisms, legal backing, platform response, and recommendations. Added live privacy signal status indicator (Section 4.4) detecting GPC and DNT signals from the user's browser in real time. Updated TOC with sub-entries for Section 4
4.6	April 23, 2026	Enhanced browser-specific cookie management instructions (Section 3.1) with step-by-step guides for Chrome, Firefox, Safari, Edge, and Brave including per-site cookie controls and clearing procedures. Added Brave browser with GPC cross-reference
4.5	April 23, 2026	Added EU Digital Services Act (DSA) compliance disclosure confirming no dark patterns in cookie consent interface. Added ePrivacy Regulation readiness statement documenting forward-looking compliance with anticipated requirements including browser-signal-based consent. Updated cookie inventory audit date to April 23, 2026
4.4	April 15, 2026	Final compliance review: synchronized review badge date, updated cookie inventory audit date, verified preference center toggle states (on/off/disabled) and cookie disable impact table accuracy. Confirmed all cookie names listed match actual implementation
4.3	April 15, 2026	Added accessible table captions (sr-only) to all 12 cookie tables for WCAG 1.3.1 compliance. Added focus-visible styling for toggle switches to improve keyboard navigation. Updated version badge to v4.3
4.2	April 15, 2026	Added Cookie Data Access Matrix (2b) documenting exactly what personal data each cookie category can and cannot access, third-party data sharing per category, and retention after deletion. Added Preference Center State Persistence section (2b.1) documenting primary/fallback storage mechanisms, cross-device limitations, default consent state (off), and save confirmation behavior. GDPR Art. 13(1)(e) transparency enhancement
4.1	April 15, 2026	Added Third-Party Data Flow Summary table (9c.0) showing exactly what data each third-party service receives from your browser, destination countries, transfer safeguards (EU-US DPF, SCCs, PCI DSS), and user control options. GDPR Art. 13(1)(e) transparency enhancement. Cross-referenced Privacy Policy Section 8 for transfer framework details
4.0	April 15, 2026	Added cross-references to Terms of Service, Privacy Policy, DMCA Policy, and Acceptable Use Policy in closing reference box. Cross-policy consistency review ensuring company name, contact information, and legal definitions align with all companion policies
3.9	April 15, 2026	Enhanced Sentry error monitoring disclosure (9c.5) with detailed PII scrubbing configuration, browser metadata categories, and link to Sentry privacy policy. Added Redis/Upstash rate limiting disclosure (9c.6) clarifying server-side ephemeral data handling with no PII storage
3.8	April 15, 2026	Added Cookie Lifecycle section (5c) with session vs. persistent cookie comparison table covering creation triggers, expiry periods, and renewal behavior for all cookies. Added How the Consent Banner Works section (5d) with step-by-step walkthrough of the consent flow: banner appearance, user options (Accept All, Reject Non-Essential, Cookie Settings), choice recording, and preference change process
3.7	April 15, 2026	Added Third-Party Cookie Details section (9c) with per-provider breakdown: Google Analytics with IP anonymization and opt-out link, Stripe fraud detection cookies, Google and Microsoft OAuth session cookies, Sentry no-cookie disclosure. Added Mobile Cookie Management section (9d) with step-by-step instructions for iOS Safari, Android Chrome, Samsung Internet, and Firefox Mobile
3.6	April 15, 2026	Added Consent Record Keeping section (5a) documenting what consent records are maintained per GDPR accountability principle (Art. 5(2)), including consent choice, timestamp, policy version, and consent method. Added Cookie Lifespan and Renewal section (5b) with 12-month renewal requirement aligned with EDPB Guidelines 05/2020 on Consent. Enhanced Updates to This Policy (6) with consent reset mechanism and fresh consent requirement for new cookie categories. Added DPO contact to Contact Us section (7)
3.5	April 14, 2026	Added interactive cookie scanner (9.3) that lists all cookies currently set in the browser with category classification, delete non-essential button, and localStorage scanning. Redesigned preference center UI with category icons, on/off status badges, cookie count details per category, and improved visual hierarchy. Added review schedule badges and enhanced print stylesheet with page-break rules
3.4	April 14, 2026	Enhanced cookie inventory table with consent-required and security-flags columns, added cookie count summary, added "Customize" button to consent banner for granular control access, improved banner accessibility with min-height touch targets, updated all link colors for WCAG contrast compliance
3.3	April 14, 2026	Added Global Privacy Control (GPC) signal recognition with automatic opt-out (4.1), renamed DNT section to include GPC, implemented GPC detection in consent JavaScript, strengthened DNT guidance to recommend GPC over legacy DNT
3.2	April 9, 2026	Added consent renewal mechanism documentation (9a), Google Consent Mode v2 disclosure (9b) covering default denied state, cookieless pings, and region-specific behavior
3.1	April 8, 2026	Added collapsible/expandable sections, reading time indicator, email page link, floating back-to-top button, enhanced print stylesheet
3.0	April 8, 2026	Added interactive toggle switch UI for cookie preferences, Marketing cookie category, Cookie Inventory Summary table (2a), print button, saved-confirmation feedback
2.0	April 8, 2026	Added consent withdrawal and cookie deletion guidance (5.1), version history (10), expanded legal basis section with UK PECR
1.0	March 2026	Initial Cookie Policy

10.1 Document Changelog

Select a version transition below to see a summary of what changed: