Cookies, device storage, analytics and logs
Controlled document: ACC-DOC-STORAGE (decision ACC-STORAGE-001)
Candidate version: 0.5
Live-service status: the exact Netlify production deployment and public
domain were checked on 5 August 2026. Netlify Web Analytics, Real User
Monitoring, Log Drains and Google Analytics are disabled. The released static
bundle contains no project-controlled browser storage or service worker.
The design commitment
The public site is built to use no health-data storage, no advertising technology, no profiling and no cross-site tracking. Pages are plain pre-rendered HTML. The worksheets and note fields on some pages exist only on your screen: they are cleared when you reload and are never transmitted.
The codebase contains a separately gated optional Google Analytics integration, but it is disabled and has no measurement ID. The public release therefore does not need or set the prepared consent-choice cookie. Netlify Web Analytics, Real User Monitoring and Log Drains are also disabled. These features cannot be switched on silently: the inventory, privacy wording and live consent tests must be updated first.
The public release also ships no service worker and no offline cache, so a withdrawn or corrected page is not silently kept alive on your device by us. (Your browser's ordinary history and cache behaviour remains under your control, not ours.)
Verified inventory
| Mechanism or supplier | Browser/server | Data read or written | Purpose | Essential? | Duration | Recipient | Evidence |
|---|---|---|---|---|---|---|---|
| Consent-choice cookie | Browser | None in this release | — | — | — | — | Optional integration disabled in the exact public build |
| Google Analytics cookies or requests | Browser/provider | None in this release | — | No | — | — | No measurement ID; integration disabled |
| Local/session storage, IndexedDB | Browser | None | — | — | — | — | Exact public bundle and live network behaviour checked 5 August 2026 |
| Service worker / project offline cache | Browser | None — not shipped | — | — | — | — | Exact public bundle and live checks completed 5 August 2026 |
| Netlify Web Analytics and Real User Monitoring | Provider/browser | Disabled | — | — | — | — | Authenticated Netlify project inspection on 4 August 2026 |
| Embedded media, remote fonts, maps or social widgets | Browser | None — public assets are served locally | — | — | — | — | Build manifest and live network inspection completed 5 August 2026 |
| Operational hosting requests | Server/provider | Request-level information needed to serve, secure and debug the site | Delivering and protecting the service | Yes | Owner-visible Observability history is one day on the current plan; additional provider-side retention follows Netlify's terms | Netlify and disclosed subprocessors | Netlify documentation, project configuration and live request inspection checked 5 August 2026 |
| Log Drains or separate error monitoring | Browser/server | None selected | — | — | — | — | Netlify project inspection; must remain absent unless separately assessed and disclosed before activation |
What this means for you
- What is used: the live host necessarily processes a request to serve a page. This operational processing is not presented as audience analytics.
- What is not used: optional audience analytics, advertising pixels, behavioural profiling, cross-site tracking and server storage of anything typed into an FND Guide worksheet.
- Analytics controls: no analytics choice is shown because optional analytics is off. If that changes, equal accept and reject controls and a way to revisit the choice must pass exact live tests before activation.
- Offline or cached content: we ship none; anything cached is your browser's standard behaviour.
- Changes: if any of this ever changes, this page and the change log are updated before the change goes live.
Review record
- Technical inspection: project owner with Codex-assisted checks, 5 August 2026; exact public deployment, domain, bundle and network behaviour checked; optional analytics remains disabled.
- Data-protection advice: not obtained.
- Consent and objection position: optional audience analytics remains disabled. Any later activation requires a fresh documented decision and effective browser controls where consent is used.
- Owner exact-version decision: approved through the controlled successor transaction for version 0.5.