Legal draft
Cookie Policy
The storage technologies the website sets, including the sign-in session cookie and Google Analytics cookies.
- Version
- 0.4-draft
- Status
- Draft. Not in effect.
- Effective date
- Not set
Version history
- 0.1-draft (date not set). Initial attorney-review drafts. Not in effect.
- 0.2-draft (date not set). Describe email verification, the session cookie, API key hashes, and screenshot quotas. Still a draft. Not in effect.
- 0.4-draft (date not set). Page views are sent to Google Analytics when a measurement ID is configured. The cookie notice lists the Analytics cookies. Still a draft. Not in effect.
How to read this draft
This page lists storage technologies the DataTuber application sets on a visitor browser. The audit looked at the website source for cookies,localStorage, sessionStorage, and analytics or advertising scripts. It did not inspect a live production response. See the Privacy Policy for the wider data picture.
Inventory
The application sets one essential cookie so a verified sign-in can continue. When a Google Analytics measurement ID is configured, Google's tag also sets the two cookies below. Those cookies are not set when the measurement ID is absent.
| Name | Provider | Purpose | Duration | Essential or optional |
|---|---|---|---|---|
dt_session | DataTuber website | Keeps a signed-in session after the email link is opened. The cookie value is the session token. The database stores a hash of it. | 30 days | Essential |
_ga | Google Analytics | Distinguishes browsers for Google Analytics. Set on this site's domain by Google's tag when a measurement ID is configured. | 2 years (Google's default) | Optional |
_ga_* | Google Analytics | Keeps session state for this Analytics property. The star is the measurement ID with the G- prefix removed. | 2 years (Google's default) | Optional |
The same source check found:
- No
localStorageorsessionStorageuse. - Google Analytics loads when a measurement ID is configured. No advertising or session-replay script.
- No consent-management script, and no cookie banner.
- Preview forms keep what you type in memory for that view. That memory is not a cookie and is not written to browser storage by this app.
Fonts
The typefaces are loaded with the Next.js font tool. That tool is built to fetch font files when the site is built and to serve them from the same website afterward. On that design, a normal page view does not call Google Fonts and does not set a Google cookie.
TODO: OWNER/COUNSEL REVIEW. Before publication, capture a production page load and confirm there is no request to a third-party font host and no Set-Cookie header from the site or its CDN. If a cookie appears, add it to the table with its real name, provider, purpose, and duration.
Hosting and CDN cookies
The repository does not name a host or a CDN. The application sets the session cookie described above. It does not set a cookie on a host's behalf. Some hosts add a cookie of their own. That has not been verified for a production deployment of this site.
TODO: OWNER/COUNSEL REVIEW. Record the live response headers. Classify any host cookie as essential or optional with counsel. If it is optional analytics or marketing, implement a lawful choice before the cookie is set. Do not add a banner that pretends the choice already exists.
Choice and consent
The session cookie is required for a signed-in session. The Google Analytics cookies are not. The site does not ask for a choice before those analytics cookies are set. Browser controls can still block or delete cookies. There is no in-product switch that turns Analytics off.
TODO: OWNER/COUNSEL REVIEW. Confirm which consent rule applies to the markets you actually serve. If that rule requires a choice before a non-essential analytics cookie is set, add that choice before the measurement ID is set in production. Do not add a banner that pretends the choice already exists.
Contact
Questions about cookies have no published address yet. The privacy contact is also unpublished. See the review note on the Privacy Policy.