GTLD Cookie and Similar Technologies Policy

DRAFT v1.0 | Pending cookie audit

GTLD is operated by ZAGRAN LTD (Company No. 16334360). Our service uses strictly necessary session, login security and CSRF cookies to keep the website functioning. If we enable analytics, marketing or other non-essential trackers, we will explain their name, provider, purpose and lifespan and ask for an affirmative opt-in before setting them, unless a properly assessed legal exception applies. Continuing to browse is not consent. Optional cookie controls will offer Accept optional, Reject optional and Manage choices with comparable prominence; non-essential toggles are off by default. Users can revoke or change preferences through a persistent "Cookie settings" link in the footer.

Cookie register to populate automatically from actual production code before launch:

| Cookie / technology | Provider | Purpose | Essential? | Duration |

|---|---|---|---|---|

| `gtld_session` (proposed name) | GTLD | Secure logged-in session | Yes | [actual session expiry] |

| `gtld_csrf` or equivalent | GTLD | CSRF protection | Yes if used | [actual expiry] |

| `gtld_cookie_choices` | GTLD | Remember user preferences | Necessary for choices | [actual duration] |

| All other cookies | [audit before deployment] | [actual purpose] | default No | [actual duration] |

Developer: do not introduce analytics or third-party scripts by default; include a cookie scanner/test in acceptance criteria. If no non-essential cookies exist, a simple informational notice and settings link may be appropriate; do not add a fake consent banner. This text must reflect actual cookies rather than placeholders in published production. Security cookies should be Secure/HttpOnly/SameSite as appropriate. Contact: admin@gtld.name. Privacy details: `/privacy`.