Cookies - DRAFT pending counsel review 2026-05-24
YRQR uses essential storage for authentication, security, campaign operation, and form reliability. Optional analytics or marketing cookies must stay disabled until consent and configuration allow them.
Required for login, secure sessions, consent state, anti-abuse controls, contact form protection, payment handoff, and the basic operation of operator and participant surfaces. These cannot be switched off through the product without breaking the service.
Used to remember simple interface choices, language preferences, selected organisation context, and consent decisions once those controls are enabled. These should last no longer than needed for the preference.
May be used to understand aggregate website and product usage through tools such as PostHog. Analytics must be consent-gated for public marketing and dashboard use unless counsel confirms a different lawful route.
Services such as Cloudflare Turnstile, Supabase, Sentry, PostHog, Stripe, Prodigi, Mapbox, or Cloudflare may set cookies or equivalent identifiers according to their role. Provider names and purposes must be confirmed before launch.
Browser settings can block or delete cookies. Blocking essential cookies may prevent login, form submission, or campaign participation from working correctly. The YRQR consent banner should offer Accept all, Essential only, and Manage choices before optional tracking is enabled.