This is the current internal text while cofounder/legal review and missing operator/provider facts are completed. It is not an effective public policy.
Draft for cofounder and legal review — not approved for external use Updated: 26 September 2026
This notice describes browser storage, cookies, and analytics planned for NameN. The exact inventory must be generated from and checked against the release candidate before publication.
1. Strictly necessary storage
The service may use essential browser storage or cookies for:
- passwordless authentication and secure sessions;
- cross-site request forgery and abuse protection;
- checkout state and payment return handling;
- privacy and cookie preferences;
- load balancing, security, and requested service continuity.
These items are used only to provide or protect a feature requested by the user. They are not repurposed for advertising.
2. Analytics
The approved product direction is minimised, self-hosted Umami analytics with no website URL, email address, payment data, patient data, unrestricted form values, or report findings in event properties. Event-level analytics is retained for 180 days and then deleted or irreversibly aggregated.
The current local adapter remains fail-closed: without an approved production configuration, no tracker is rendered and no analytics data is sent.
If analytics or another technology is not strictly necessary and applicable law requires consent, it remains off until the user makes a clear choice. Refusing optional analytics must not block the Quick Scan, account, purchase, report, support, or privacy flows.
3. No advertising tracking or sale
The MVP does not use third-party advertising cookies, cross-site behavioural advertising, or sell personal data. Adding advertising, session replay, broad behavioural profiling, or a new analytics provider requires a separate product, privacy, security, retention, and consent decision.
4. Choice and withdrawal
Where a consent control is required, the user can accept or reject optional categories with equivalent prominence and later change the choice. Withdrawal applies prospectively and does not invalidate earlier lawful processing.
Browser controls may also delete or block cookies, but blocking strictly necessary storage can prevent secure account or checkout functions.
5. Release-candidate inventory
Before launch, the published notice must list for every cookie or storage key:
- name;
- provider and first/third-party status;
- purpose and category;
- data stored;
- expiry;
- whether it is strictly necessary;
- consent behaviour;
- processing region and privacy link where applicable.
Until that inventory and the consent decision are verified against the exact release candidate, optional analytics remains disabled.
Contact: support@namen.ai.