Legal · Review draft
Cookie policy
How Fidescript uses essential authentication cookies and browser storage to support your workspace.
This document outlines the platform’s data and service practices for review. It has no effective date, does not introduce new account agreements, and must be reviewed before publication as binding or approved policy.
Essential authentication cookies
Email and password sign-in uses essential authentication cookies to maintain your account session. Deployed configuration enables secure cookies. Their scope depends on the configured service domain and any approved shared subdomain.
The installed configuration uses HttpOnly, SameSite=Lax and path /. HttpOnly prevents normal page JavaScript from reading the cookie; it is not a guarantee against every session attack.
Session duration
The configured authentication service has a default session-cookie maximum age of seven days. Fidescript does not override that setting in the reviewed auth options. Session refresh, sign-out and browser persistence settings can change the actual lifetime; this is not a promise that an account remains signed in for exactly seven days.
Optional session-data caching and web social login are not enabled by the reviewed application configuration. Exact cookies and expiry must be checked again against the deployed domain before policy activation.
Browser storage
The explicit development demo stores synthetic workspace state in sessionStorage for the current browser tab. It is separate from connected account sessions. The reviewed public site does not add preference tracking in localStorage.
Clearing session storage removes the saved synthetic demo state. Clearing cookies or blocking essential cookies can sign you out or prevent account and protected-workspace functions.
Integrations & optional tracking
No optional analytics or advertising cookies are configured by the reviewed public application. This redesign does not add tracking, marketing scripts or a decorative consent banner.
Optional identity verification and communication features connect to service providers when explicitly used. Their deployed browser behavior, storage and notices need a provider-specific review before production use. Server hosting or infrastructure may also affect browser behavior; a final deployed cookie inventory remains outstanding.
Your browser controls
Your browser settings can show, block and delete cookies and site storage. Blocking essential session cookies may prevent login. On shared devices, sign out and clear site data where appropriate.
If nonessential technologies are introduced later, the operator must assess any consent requirement, implement the necessary controls and update the reviewed notice before enabling them.
Review & contact
This draft describes inspected source and installed library defaults, not a verified production browser inventory. The operator must confirm domains, actual expiry and refresh behavior, deployed providers, notices and any applicable consent requirements.
The operator’s identity and privacy contact remain unpublished. See the Privacy Policy draft and Contact page. No new consent acknowledgement is requested by this page.