Draft policy baseline

Cookie and analytics notice

The public MVP is designed to avoid uncontrolled third-party tracking. Any future analytics or preference storage must have a defined purpose and appropriate consent control.

01

Essential storage

Security, session, form-progress or accessibility preferences may require cookies or local storage. Essential storage should be limited in duration and scope.

02

Analytics

Future analytics should measure meaningful journeys such as application starts and completions, not build invasive profiles. IP handling, retention and cross-border processing require review.

03

Consent

Non-essential cookies will not be set before valid consent where required. Users must be able to reject or withdraw as easily as they accept.

04

Current state

No advertising-cookie programme is specified. A live cookie inventory will list name, provider, purpose, duration and category before production launch.