Cookie Policy

Effective date: as shown above. Version: 1.0.

This Cookie Policy explains how the cabinet at [WEBSITE_URL] uses cookies and similar local-storage technologies. It is part of our Privacy Policy.

1. What is a cookie?

A "cookie" is a small piece of data a website asks your browser to store locally so that the next time your browser sends a request to that website, the cookie is sent back. Browsers also expose APIs such as localStorage and sessionStorage which behave similarly but stay client-side. We use both, conservatively.

2. What we use, and why

| Category | Cookie / key | Purpose | Lifetime | |---|---|---|---| | Strictly necessary | session cookie (laravel_session or equivalent) | keeps you logged in, ties form submissions to your session | session (until you close the browser) or up to 2 hours of inactivity | | Strictly necessary | CSRF token (XSRF-TOKEN) | prevents cross-site request forgery on form POSTs | session | | Strictly necessary | locale preference cookie | remembers your chosen interface language | 12 months | | Strictly necessary | cookieConsent.v1 (localStorage) | remembers that you dismissed the cookie banner | until cleared by you |

We do not currently use any:

• advertising cookies,
• cross-site tracking pixels,
• third-party analytics (Google Analytics, Meta Pixel, etc.),
• behavioural-profiling cookies.

3. Third-party checkout cookies

When you click "Pay" you are redirected to the payment provider's hosted checkout page (Stripe or PayPal). On those pages the providers may set their own cookies for fraud prevention, session continuity, and their own analytics. We have no control over those cookies and they are governed by the providers' own cookie policies:

• Stripe: https://stripe.com/cookies-policy/legal
• PayPal: https://www.paypal.com/webapps/mpp/ua/cookie-full

4. Your choices

Because all cookies we set are strictly necessary for the Service to function (login, anti-CSRF, language), there is nothing to "opt out" of without losing access. The cookie banner you saw on first visit is purely informational and acknowledges this Policy.

You can clear all cookies and localStorage for our site through your browser's privacy settings; doing so will log you out and reset your language preference.

5. Do Not Track

We honour Do Not Track signals to the extent that we already do not run cross-site tracking. There is nothing additional we can disable in response to a DNT header.

6. Changes

We will increment the version of this Policy and surface a banner if we begin using new cookie categories (e.g. analytics, advertising). Until that happens, the inventory in section 2 is exhaustive.

7. Contact

Questions about cookies: [LEGAL_EMAIL].