Cookie & storage policy
The four cookies and storage keys this page uses, and how to opt out.
This page uses a small set of cookies and browser-storage keys, all of which are itemized below. We do not use third-party advertising or analytics SDKs, and we honor the Global Privacy Control signal where US-state regimes recognize it.
Categories at a glance
Strictly necessary. Items required for the page to function (e.g., remembering your consent choice, the Cloudflare Turnstile bot-detection token).
Functional. Items that improve the experience but are not required (e.g., remembering form draft text on the same browser tab).
Analytics / advertising. None. We do not load third-party analytics or advertising SDKs on this page.
Inventory
The following cookies and storage keys may be set when you visit this page. The inventory is exhaustive; if you observe a cookie or key not listed here, please report it via the DSAR page so we can investigate.
| Name | Type | Category | Purpose | Retention |
|---|---|---|---|---|
__retain_consent | Cookie | Strictly necessary | Records your consent choice (Accept All / Reject All / per-category). | 13 months |
cf-turnstile-* | Cookie | Strictly necessary | Cloudflare Turnstile bot-detection (set by Cloudflare during CAPTCHA challenge). | Session / short-lived |
retain_tracking | sessionStorage | Functional | Holds UTM, click-ID, and referrer attribution captured at first page load so it can be sent with a later submission. Empty when consent is rejected. | Session |
retain_form_state | sessionStorage | Functional | Form draft text, kept on the same browser tab for resilience. | Session |
How to opt out or change your choice
Use the consent banner (or the "Cookie preferences" link in the footer) to change your category-level choices. You can also clear cookies and storage in your browser settings; the page will prompt you again on next visit.
Global Privacy Control
We honor the GPC Sec-GPC: 1 request header as an opt-out signal where applicable US-state law recognizes it (for example, California's CPRA). When GPC is set, we treat the request as a Reject All and disable functional storage by default.
Changes
When the inventory changes, both this page and the internal product requirements document are updated together; we treat unbalanced changes as a release-blocker.