How KnownStock uses cookies and browser storage.

1 · Scope

Public website and signed-in application.

The public KnownStock website uses Google Analytics only after the visitor accepts analytics. It does not use advertising or behavioural-profiling cookies. The signed-in application does not use Google Analytics; it uses one strictly necessary first-party session cookie and limited browser storage to provide secure access, drafts and offline operation.

2 · Necessary session cookie

Keep an authorised session secure.

After registration or sign-in, KnownStock sets knownstock_session (or the deployment-configured equivalent). It is a first-party, HTTP-only cookie with SameSite=Lax, Path=/ and Secure enabled in production. JavaScript cannot read it. It expires after 12 hours and is removed on sign-out.

3 · Browser storage and offline cache

Support preferences, drafts and resilient work.

The application may store the chosen language and workspace-bound draft context in local storage, keep the anti-forgery token in session storage, and cache the application shell and static assets through its service worker. These technologies are not advertising cookies. Signing out clears sensitive workflow context and the session token; the language preference and cached static assets remain until they are replaced or cleared in the browser.

4 · Optional Google Analytics

Measure the public website only after consent.

If analytics is accepted, KnownStock loads Google Analytics 4 for measurement ID G-MHKJ19R7CW. Google may set _ga and _ga_<container-id> cookies and receive the page URL, approximate location derived from the IP address, browser and device information, and measured interactions such as page views, scrolls, outbound clicks, site search, file downloads, video engagement and form interactions. KnownStock does not send account email, workspace data or operational inventory records to Analytics.

Google signals and advertising-personalisation signals are disabled in the KnownStock configuration. Google Analytics is not loaded at all while analytics consent is absent or rejected.

5 · Paddle checkout

Load payment technology only when the Owner asks.

The public pricing page does not load Paddle or set Paddle cookies. Paddle.js loads only after the workspace Owner deliberately opens checkout. Paddle then acts as Merchant of Record and applies its own privacy, cookie and storage practices to checkout and payment records.

6 · Managing your choices

Analytics is optional; necessary technology is not.

The consent choice is stored locally for up to 12 months. The banner offers equally available rejection and acceptance, and Cookie settings in the footer can change the choice at any time. Withdrawing consent stops future Analytics measurement and KnownStock attempts to remove its Analytics cookies from this site. Browser controls can also delete or block cookies, storage and caches, but blocking the session cookie prevents sign-in and clearing application storage removes locally held preferences, drafts or offline resources.

7 · Retention

Keep browser and analytics data only for its stated purpose.

The session cookie lasts up to 12 hours and the consent choice up to 12 months. Google Analytics cookies may last up to two years; event-level Analytics data is configured to be retained for 14 months. Session storage ends with the browser tab or session. Draft context and language preferences remain until sign-out, replacement or browser deletion; cached assets are versioned and replaced by the service worker.

8 · Analytics provider and transfers

Google processes optional measurement data.

For visitors in the European Economic Area and Switzerland, Google Ireland Limited provides Google Analytics. Google may process data in other countries under the safeguards described in its privacy documentation and applicable data-transfer mechanisms. The Privacy page explains the general international-transfer approach.

9 · Changes and contact

Publish material changes before using new technology.

Any new non-essential category will remain disabled until the required choice is obtained and this policy and the settings interface are updated. Questions about cookies or browser storage can be sent through the verified privacy contact shown on the Privacy page.