Cookie Policy

[OWNER TO APPROVE] Draft placeholder, not approved legal advice. Company details, contact channels, retention periods, suppliers and terms must be reviewed before launch. Version: 2026-10-26-draft-1.

Cookies and similar storage

[OWNER TO APPROVE] This policy covers cookies, local storage and related technologies under UK GDPR and PECR. Essential storage supports sign-in, security, pending invite codes and saved setup progress. The offline shell caches static icons and the offline screen, not workspace records.

Draft inventory

[OWNER TO APPROVE] Authentication session storage: maintained by the authentication service until expiry or sign-out. Pending tenant invite and agreement storage: retained until consumed or cleared. Company invite: session storage until used or cleared. Setup preferences: retained until cleared. Hosting security cookies: [Names, providers and expiry periods to confirm with a published-site cookie audit].

Non-essential use

[OWNER TO APPROVE] No optional analytics or advertising technology is added by this change. Confirm all hosting and external service behaviour. Any future non-essential cookies must be blocked until separate opt-in consent; refusing them must not block essential account use. Signing up does not consent to advertising cookies.

Your controls

[OWNER TO APPROVE] You can clear or restrict cookies and site storage in your browser. Doing so may sign you out or remove saved invite/setup progress. Optional consent controls: [To be supplied if non-essential technologies are introduced]. Contact [Privacy contact email] for questions.