Cookie Policy
Last updated: 14 October 2026
DRAFT — for review by a UK solicitor. Not final.
Current use
The public Next.js site has no first-party cookie or local-storage writes in its application code. The linked PWA uses Supabase authentication session storage, auth redirect and callback session storage, install-prompt state, notification-bubble state, and account-specific application state. These are intended for session, security and requested product functions.
TODO(legal): Audit provider-set cookies and each PWA storage key before approving a strictly necessary classification and retention schedule.
Analytics and advertising
No analytics or advertising trackers are enabled in the reviewed application source. Non-essential cookies must remain off by default until opt-in consent is implemented.
Controller
See the privacy policy for controller identity. GORGE is a trading name of Vinculo Digital Ltd, a company registered in England and Wales, company number 17322908. Registered office: 1 Mayberry Place, Surbiton, KT5 8SY, United Kingdom.