1. Reviewed inventory
The code review found no public analytics, advertising or personalisation cookies, and no use of localStorage or sessionStorage. No banner was added because the current inventory does not show a non-essential technology requiring prior consent.
This conclusion is a snapshot of the repository. It does not replace a production check, a review of the Vercel dashboard, a review of scripts added outside the repository or checks for future changes.
2. Administrative cookie
| Name | Purpose | Duration | Attributes |
|---|---|---|---|
pg_requests_admin | Maintain the protected administrator panel session. | Maximum 8 hours | HttpOnly, SameSite=Strict, Path=/ and Secure when the request uses HTTPS. |
The cookie is not used to track visitors or measure audience. It appears only after administrator authentication and is needed to maintain that session. This classification must be checked against the deployment's actual configuration and use.
3. Third-party requests
An external image request is not itself a cookie, but it may communicate the IP address, user agent, referrer or other network metadata to the destination host. The items API returns HTTPS URLs that the browser may request directly; this surface must be included in the privacy and provider inventory.
If analytics, advertising, personalisation, pixels, additional storage or any non-essential technology is added, this inventory must be updated and a prior, granular and revocable consent mechanism must be considered under the applicable law.
4. Contact and changes
[PENDING: identify the controller, publish the contact channel, confirm the legal classification of each technology and add a version and review date.]