Cookie Policy \u2014 Essential Cookies Only

Draft updated 14 October 2026 · Version 0.2 · Review before launch

This Service does not currently use analytics cookies, advertising cookies, social tracking pixels or marketing identifiers. It does use an essential, first-party sign-in cookie after you authenticate.

Cookie inventory

newera_session — HTTP-only, SameSite=Strict, Secure in production; authenticates your account; nominal retention seven days, or removed on logout. The cookie contains only a random opaque token, not your password or bot token. The corresponding SHA-256 token hash is stored on the server.

Why no cookie banner?

Consent is not generally required for a cookie strictly necessary to deliver a service that you explicitly request, although transparent notice is still required. A banner offering “reject essential cookies” would be misleading because you cannot stay signed in without authentication state. If optional cookies, analytics or third-party embeds are introduced, they must be assessed, disabled until any required consent and accompanied by usable withdrawal controls.

Cookies and browsers

You may block or clear cookies in your browser; doing so prevents or ends account sessions. This policy does not cover third-party sites you choose to visit.

Individual operator and contact

Website operator: NOT CONFIGURED — operator legal identity required before launch
Contact email: NOT CONFIGURED — contact email required before launch
Public contact address: NOT CONFIGURED — public contact address required before launch

These documents are draft templates, not a legal-compliance certification. Complete the operator details, assess actual hosting and processors, obtain jurisdiction-specific legal advice, and confirm all statements match the deployed service before publication.