Cookie policy template
The starter can operate with strictly necessary cookies only. Document and obtain consent for every nonessential technology added later.
Template updated July 22, 2026. Replace every placeholder and obtain jurisdiction-specific legal review before public launch.
Strictly necessary storage
The intended service uses secure session cookies for authentication and a CSRF token for request protection. Browser local or session storage may remember the active profile, onboarding prefill, and interface preferences. These functions are necessary for the requested service or stored at the user’s direction.
Third-party technologies
Cloudflare Turnstile may set or read data necessary for bot detection. Stripe may use cookies or similar technologies on hosted checkout and billing pages. List final names, providers, purposes, durations, and domains after configuration.
Analytics and marketing
No analytics or advertising platform is required by the starter. If added, classify it, minimize collection, update the privacy policy, implement consent where required, respect withdrawal, and avoid sending raw birth data or private prompts.
Managing choices
Explain how users can change nonessential consent, clear browser storage, and understand the effect of blocking necessary cookies. Provide a real consent-management interface before enabling nonessential tags.