Cookie Preferences
Operative consent controls for cookies and similar technologies on this device. Choices here drive actual tracker execution via the consent engine (src/lib/compliance/consent.ts + ConsentContext). Full explanation in the Cookie Policy (/legal/cookies).
Draft for legal review
This document is an implementation draft written to match how the product actually behaves. It has not been reviewed by a qualified lawyer and must not be relied on as legal advice. Items marked or are unresolved.
1. Your controls (what each button does)
Accept all: grants analytics, advertising (where present), personalisation and functional storage for 12 months. Reject all: denies all non-essential categories (functional/analytics/advertising/personalisation) and keeps only strictly necessary; equivalent to withdrawing where previously granted. Manage preferences: per-category toggles (Necessary always on + exempt; Functional / Analytics / Advertising / Personalisation individually switchable) with plain-language descriptions. All three actions have equal prominence, are keyboard-operable (Tab/Shift+Tab/Enter/Escape), focus-managed with restoration, and screen-reader announced — no dark patterns.
Effect is immediate for future processing on this device/browser. Stored in localStorage zdefence_consent_v1 (policy version + text version + timestamp + jurisdiction + source + method + anonymous ID) and, where an account/request exists, in consent_records for audit. Withdrawing is as easy as granting: footer Cookie Settings (every page), this page, or /privacy-center #cookies.
2. GPC, policy changes and expiry
GPC/DNT (Sec-GPC: 1) is honoured as an opt-out of advertising/personalisation and, where required, sale/sharing — with visible confirmation — even if you previously accepted. A Cookie Policy version bump that materially changes notice triggers re-consent. Choices expire after 12 months, then we ask again.
3. What is off today
Analytics, advertising, personalisation, session replay, A/B testing and social widgets are not in use, so granting those categories today has no effect beyond recording the preference for future use. If a vendor is added, it will not execute until you consent (where required) and the Cookie Policy category table will list it first.
4. Version
Version 0.9.0-draft, last updated 2026-10-02, LEGAL REVIEW REQUIRED. See CookieBanner, CookiePreferences, CookieSettingsButton/Link components and tests/cookies/tracker.test.ts.
Sources
This document is derived from the following entries in our legal source registry: EU-EPRIVACY, EU-EDPB-COOKIES, UK-PECR, US-CA-CCPA, US-CA-GPC. See for the full citations and the date each source was last verified.