Cookie Policy (draft)

Necessary cookies only before consent (session authentication, security). If analytics is added later, a documented consent strategy will be used. Transactional and marketing email consent paths remain separate.