Cookie Policy

A cookie is a small file stored by a browser. Similar technologies can include local storage, identifiers or server-side technical logs. They may support basic functions, remember choices, protect a service or measure its use.

The site uses Vercel Web Analytics, which Vercel documents as cookie-free and based on a visitor hash that resets daily. It provides aggregated page-view and usage statistics. At application level, the website does not use non-essential analytics, advertising or marketing cookies.

Hosting, network or security providers may also use technical mechanisms necessary to deliver or protect the service.

When operating details and pricing are unlocked, the server sets one catalogue cookie named `__Host-ae_agent_catalog`. It contains a random raw session token; only its SHA-256 hash is stored in the database. The cookie unlocks protected details for all five agents for no longer than 24 hours. Each agent's price is loaded separately from that agent's active Supabase package. HttpOnly protection keeps the raw token out of JavaScript and URLs.

The cookie is HttpOnly, Secure in production, SameSite=Strict and Path=/. It has no Domain attribute and a maximum lifetime of 24 hours. It is essential to the requested unlock function and is not used for advertising, analytics, marketing or cross-site tracking.

Language is currently determined by the URL, such as /fi or /en. The application does not need a separate cookie to remember the language choice. Future technical preferences will be documented if browser storage is introduced.

Analytics, marketing technology or other non-essential tracking will not be activated before its purpose, data, retention, provider and consent requirements are assessed. Consent management will be introduced first where required, and this policy will be updated.

You can review, block and remove cookies in your browser settings. Blocking all cookies may affect how some online services work. Your browser's help documentation provides specific instructions.

This policy will be updated if browser storage, analytics, marketing or consent features are added. The updated date identifies the latest substantive review.