Cookie and Storage Notice

This website currently avoids non-essential cookies by default.

Preferences and Admin Storage

• mahernova.cookieConsent uses localStorage to remember your banner choice, notice version and date until you change it or clear site data. It has no automatic expiry. A notice version change prompts you again.
• __Host-mahernova-admin is an essential admin session cookie on the API host. It uses HttpOnly, Secure and SameSite=Strict in production, with no parent-domain sharing. Its signed token expires after the configured access lifetime (15 minutes by default). Logout clears it and revokes the session; signing in again also replaces the previous session. Browser session restoration may retain the cookie, but does not extend token validity. The local development equivalent is mahernova-admin-dev, without Secure for local HTTP testing.
• Old mahernova.admin.session sessionStorage data is removed when the updated admin page opens. The updated page does not store authentication tokens in JavaScript-accessible storage.
• mahernova.admin.apiBase uses localStorage to remember the admin API address until it is changed or site data is cleared.

Accept All (notice version 3) allows one page-view event per loaded portfolio page to the MaherNova API. Essential Only sends no analytics event. No advertising cookies, visitor IDs, full URLs, referrers, names or message content are included in the event. Earlier consent versions prompt again before this new purpose is enabled.

If enabled by the site operator, the API increments a daily in-memory counter. There are no individual event records; the counter resets on process restart and when the next request observes a new UTC day. Different server processes have separate counts, so this is an approximate page-view count rather than unique visitors. Hosting and network providers still process normal request metadata, including the connecting IP address. Changing to Essential Only prevents future events; anonymous aggregate counts cannot identify an event for removal.

Use Cookie preferences in the footer or policy navigation to reopen the banner and select Essential Only. Remembering Claude chat is a separate opt-in: switch off Remember this chat or select Clear Chat to remove saved conversation data. If browser storage is blocked, the banner choice applies only to the current page and may be requested again after reload.

Browser Storage Used by the Claude Demo

The Claude demo may use browser local storage to remember recent chat turns, but only if you choose the "Remember this chat in this browser" option.

Storage key:

• mahernova-claude-chat

Purpose:

• Keeps recent Claude demo messages in the same browser so the page can restore the conversation after refresh.

Duration:

• Saved messages are treated as expired after 24 hours and removed when the app next reads them. Browser storage does not delete itself while the site is closed. Clear Chat, switching off Remember this chat, or clearing browser site data removes them earlier.

Data stored:

• Recent user and assistant message text.

Essential Technologies

The website may use strictly necessary server-side technologies for security, routing, uptime, and form/API operation. These do not require consent when they are essential to provide the service requested by the visitor.

Analytics and Marketing

Do not add analytics, advertising pixels, heatmaps, tracking scripts, embedded social widgets, or similar technologies until:

• The tool has been documented here.
• A consent mechanism is in place where required.
• The privacy notice identifies the provider, purpose, legal basis, retention, and transfer safeguards.

Managing Storage

Visitors can:

• Use the Clear Chat button in the Claude demo.
• Leave the remember option unchecked.
• Clear site data through their browser settings.

Launch Checklist

Before launch:

• Confirm whether the production hosting provider sets any cookies.
• Deploy and verify the browser authentication cookie routes together with the updated admin page.
• Confirm whether analytics, monitoring, CDN, WAF, or bot-protection tools set cookies.
• Update this notice with exact names, purposes, durations, and providers.