Legal · Draft
Cookie Policy (Draft)
Draft cookie notice for the MaintenanceOS marketing website. No analytics or marketing cookies are configured; first-party operational measurement is cookieless and uses no persistent visitor identifier. Not a compliance certification.
Last updated: [OWNER: effective / last-updated date]
Who this applies to: Visitors to the MaintenanceOS marketing website and, where relevant, people who submit launch-list, demo, contact, or /create early-access forms.
Contact for this cookie notice: [email protected]. Online enquiries are temporarily unavailable. The contact page shows the same address.
Related: Privacy · Cookies · Terms · Security (product trust narrative — not a substitute for this cookie notice)
About this cookie notice
This draft explains cookies and similar technologies on the MaintenanceOS marketing site; it is pending legal and Privacy sign-off. Website-URL ingest on /create is described in the Privacy Policy (Draft); it is not a cookie category.
What are cookies?
Cookies, local storage, and similar technologies (including pixels, if ever used) are small pieces of data stored on your device to make sites work or to understand how they are used.
How we use cookies
We use a four-category scaffold below, and only enable categories that exist in the build. None of this is a finished counsel-approved policy.
Cookie categories
Essential · Preferences · Analytics · Marketing. UK-style default: non-essential off until affirmative consent. Lead-form submit is operational, not an analytics cookie category.
| Category | Required? | Current status |
|---|---|---|
| Essential | Yes | None named in inventory yet. Hosting may set operational cookies; consent-preference storage is not built. |
| Preferences | No | None currently |
| Analytics | No | No analytics cookie or third-party analytics tag. First-party cookieless operational measurement only; no browser storage or persistent visitor identifier. |
| Marketing | No | Unused at pre-launch; no cookies |
Essential cookies
Reserved for required site operation if and when named. Inventory is empty — do not invent cookie names. Consent-preference storage is not implemented. Do not put analytics or marketing here. [OWNER: list when known].
Preferences cookies
Remember UI or locale choices if introduced — non-essential; default off until consent — [OWNER: list or “none currently”]. None currently.
Analytics cookies
No analytics cookies are configured. First-party cookieless operational measurement is built to record only bounded event type and pathname data. It uses no cookies, localStorage, sessionStorage, persistent visitor identifier, referrer, query string, or user-agent in the stored event record. While no measurement endpoint is configured, the beacon does not post. The previous Railway-hosted control plane returns Application not found, so events are not sent there. There is no third-party analytics SDK or tag. This draft remains pending legal review and is not a Google Analytics, PECR, or GDPR compliance certification.
Marketing cookies
Not used on this pre-launch site; state absence rather than inventing tags. Non-essential and default off if ever added.
Cookie inventory table
Fill only when a real tag exists; otherwise none configured. Never invent cookie names, vendors, or durations.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| None configured — inventory empty until Essential consent-preference storage or other tags are implemented and named by OWNER. | ||||
Managing your preferences
There is no site-wide consent banner today because no non-essential cookies, browser-storage analytics, or marketing tags are loaded. The first-party operational measurement described above is cookieless and stores no persistent visitor identifier. A preference centre would be wired only if optional storage or tags are introduced; this page is still a draft, not a live consent manager.
Consent UI TBD — draft expectations only. No site-wide banner and no non-essential cookies, browser-storage analytics, or marketing tags are loaded today. Cookieless first-party operational measurement does not set a visitor identifier. This is not a Google Analytics, PECR, or GDPR compliance certification.
- Accept all — when a consent UI exists, would allow optional categories (Preferences, Analytics, Marketing) subject to what is actually implemented. LEGAL MUST CONFIRM final wording and behaviour.
- Reject non-essential — intended for optional cookies/storage if introduced. Today there are no analytics or marketing cookies to switch on or off.
- Essential consent-preference storage — planned so a choice can be remembered; not implemented yet. Do not invent cookie names here.
Browser controls
Most browsers let you block or delete cookies; blocking Essential cookies may break parts of the site.
Changes to this notice
[COUNSEL] — version and date practice for material updates.
More information
See the Privacy Policy (Draft) and contact for further questions.
To be completed by legal review.