Cookie Policy · legal-pages/v1 draft
Cookies, plainly.
Italian Brainrot uses the EXC-279 cookie categories: necessary, preferences, analytics, and marketing. The current site defaults to necessary only and does not load analytics or marketing providers.
Template record
Draft pending review.
Template version: legal-pages/v1. Status: draft pending counsel or Brandon review. Do not treat this page as final legal advice or approval to add tracking.
Categories
Necessary by default.
Necessary
Required for site delivery, security, hosting diagnostics, consent storage, and basic local-only notices. This category is always enabled.
Preferences
Optional browser-local collection progress, stored only after you allow preferences. Click-to-load YouTube is a separate, per-video choice disclosed before the player loads. No server-side preference profile is created.
Analytics
Reserved for future approved measurement. Italian Brainrot currently does not run analytics scripts, analytics cookies, or third-party tag managers.
Marketing
Reserved for future approved ads, retargeting, or campaign attribution. Italian Brainrot currently does not run marketing cookies or advertising pixels.
Cookie and provider inventory
What exists now.
| Cookie or technology | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| ib-cookie-consent-v1 | Italian Brainrot | necessary | Stores the visitor's cookie-banner acknowledgement and default-deny category preferences in localStorage. | Until browser storage is cleared or the consent revision changes. |
| ib-collection-discovered | Italian Brainrot | preferences | Remembers character pages discovered by the visitor in localStorage only after they allow preferences. It is not sent to the server. | Until preferences are withdrawn or browser storage is cleared. |
| Resend email service when configured | Resend | necessary | Creates an unsubscribed contact and sends the parent/guardian double-opt-in message for a visitor-requested archive-list signup. | Confirmation links expire after 24 hours; contact retention follows the approved list-retention and deletion process. |
| Email abuse and confirmation-replay store when configured | Configured Redis-compatible REST store | necessary | Stores short-lived HMAC-hashed rate-limit keys, counters, and confirmation-token replay keys for the Resend path. | One or 24 hours depending on the security control. |
| YouTube embed storage/cookies after click | YouTube / Google | preferences | May be set by the youtube-nocookie.com embedded player only after a visitor chooses to play a video. | Controlled by YouTube/Google. |
| Vercel request logs | Vercel | necessary | Hosting and security logs for delivering the public site, including IP address, user agent, URL, timestamp, and diagnostic metadata. | Controlled by Vercel and the production hosting configuration. |
| Sentry error telemetry | Sentry | necessary | Application error monitoring when configured; used to diagnose reliability issues, not advertising or profiling. | Controlled by Sentry/project settings when enabled. |
Inventory note: Vercel, Sentry, Resend, and the configured email security store are infrastructure/service providers rather than browser marketing cookies. YouTube/Google storage is possible only after the visitor chooses to play an embedded video.
Managing choices
Rejecting is the default.
The banner starts with necessary-only default-deny choices. You can allow local preferences without enabling analytics or marketing, and analytics and marketing remain unavailable and false. Use the Cookie preferences control in the footer to reopen the banner. Withdrawing preferences removes local collection-progress storage. The disclosed YouTube play button remains a separate per-video choice. If any new non-essential provider is added, this policy, inventory, and consent controls must be updated before it loads.
Approval gate
No new tracking authorized.
This implementation records the EXC-279 category model and actual current inventory. It does not enable analytics, marketing, payments, accounts, or new provider scripts. Any future non-essential tracking or public legal publication needs counsel or Brandon approval.