Cookies and Browser Storage
Operator or commercial-policy values are not configured. This draft must be completed before commercial launch.
This policy explains browser-side storage. Exact names and lifetimes must be verified against the production deployment before optional cookies are enabled. It is not legal advice.
Essential account and service storage
Google sign-in and login-ID/password sign-in require short-lived security state and, after authentication, a secure session mechanism. Depending on the implementation this may use an HttpOnly, Secure, SameSite cookie or an equivalent token. It is used for authentication, CSRF protection, logout and abuse preventionโnot advertising.
The browser may also store language, accessibility choices, unfinished input or the most recent result for convenience. Sensitive birth inputs should not be placed in URLs or readable advertising identifiers. Deleting essential session storage signs the member out.
Activity and aggregate measurement
Member activity may be tied to the account on the server to administer credits, fair use and product history. Product demand is counted in aggregate and should not receive a persistent analytics identifier solely to recognise repeat visits. Security and delivery logs are separate from marketing analytics.
Where analytics is active, Google Analytics 4 sets first-party cookies whose names begin with _ga, used to distinguish visits and sessions. Google documents a default lifetime of up to two years. In regions requiring prior consent they are set only after consent is given. Declining deletes the ones this page can reach and stops further measurement; cookies set on a parent domain may need to be removed through browser settings.
Advertising storage
Display advertising is not enabled yet. If banner advertising is switched on, Google or another disclosed provider may use cookies or similar identifiers for delivery, fraud prevention, frequency control, consent and measurement. Advertising never unlocks or locks a reading: seeing, blocking or not seeing an ad changes nothing about your access.
Consent and regional controls
Where law requires prior consent, non-essential advertising or analytics storage is disabled until the user makes a choice. Rejecting or withdrawing personalised advertising does not reduce reading quality. It may change whether a personalised, non-personalised or limited ad is available.
Consent can be revisited through the cookie settings link in the site footer. Browser controls and provider tools may also delete or block cookies. Blocking essential authentication storage prevents sign-in, and because calculating a chart requires being signed in, it also prevents calculation.
Analytics consent is collected by a banner served by this site, not by an external consent-management platform. It appears only where prior consent is requiredโthe EEA, the United Kingdom, Switzerland and the Republic of Koreaโand also when the visitorโs country cannot be determined. Until a choice is made in those places, no Google script is loaded and no request reaches Google. The country is derived server-side from the network address by our content-delivery provider and is not stored for this purpose. Enabling display advertising for the EEA would additionally require a Google-certified consent platform.
Production register
Before launch, the production register must state each cookie/storage key, controller or provider, purpose, category and retention. Retention settings are not guessed: member activity is configured as [[UNSET:SAJU_MEMBER_ACTIVITY_RETENTION]] and guest aggregate data as [[UNSET:SAJU_GUEST_AGGREGATE_RETENTION]]. Unset values keep the commercial-launch gate closed.
Legal pages
These legal pages deliberately contain no advertising, analytics, external font/image, or consent scripts. Following an external policy link may let that external site set its own cookies under its policy.
Changes and contact
We update this document before adding a new storage purpose or provider. Questions: [email protected]. Advertising details are in Advertising and Third-Party Services and personal-data details in the Privacy Policy.