Cookie notice
Exact first-party keys, durations and Google Consent Mode v2 signals used by this preview.
Private client preview · legal operator details pending client confirmation
Two first-party records, no vendor tags
The preview uses two records for interface safety and privacy choices. Each record is mirrored in localStorage and a first-party cookie. No analytics or advertising library is loaded, so accepting optional analytics changes a consent signal but does not itself send measurement data.
| Key | Stored value | Purpose | Maximum duration |
|---|---|---|---|
mfi_risk_ack_v1 | Accepted flag, set time, expiry time | Remember acknowledgement of the first-entry market-risk notice | 12 months |
mfi_consent_v1 | Accepted or rejected, set time, expiry time | Remember the optional analytics preference and avoid repeating the banner | 6 months |
Why localStorage and a cookie are mirrored
The interface writes the same JSON record to both browser mechanisms. It uses the available unexpired copy, and expired or malformed data is ignored. Cookies are first-party, use SameSite=Lax, apply across the site and use Secure on HTTPS. They are not advertising cookies and carry no identity or financial information.
Signals set before other tags
| Signal | Default | After optional accept | Reason |
|---|---|---|---|
analytics_storage | Denied | Granted | Reserved for optional measurement; no analytics vendor is currently loaded |
ad_storage | Denied | Denied | No advertising storage |
ad_user_data | Denied | Denied | No advertising user-data permission |
ad_personalization | Denied | Denied | No personalised advertising |
personalization_storage | Denied | Denied | No personalisation storage |
functionality_storage | Granted | Granted | Supports requested interface preferences |
security_storage | Granted | Granted | Allows security-related site operation |
Reject, accept or reset
Rejecting keeps analytics and every advertising state denied. Accepting grants only analytics storage. The reset control removes both local and cookie copies of the consent record and reopens the choices; browser settings can remove both records independently.
No silent expansion
No vendor is listed because none is loaded. Before adding analytics, embeds, advertising or another non-essential service, the operator must document the provider, data, purpose, duration and transfers, update this notice, and obtain consent where required.
Launch dependency
The legal operator and privacy contact remain pending client confirmation. This notice accurately describes the private preview but must be reviewed against the selected production infrastructure before public launch.