DRAFT — structural outline for review by counsel. Nothing on this page is final legal text.
Cookies
Strictly necessary
These exist today and do not require consent:
better-auth.session_token— keeps staff signed in. HttpOnly, Secure, 7 days.- The cookie-consent record itself, once set.
Analytics
None are currently set. If introduced, they load only after consent.
Marketing
None are currently set. If introduced, they load only after consent.
Managing preferences
Use “Cookie settings” in the footer of any public page.
TODO: text to be supplied by counsel.