LEGAL · DRAFT

A small note
about cookies.

What this site stores, what it does not, and what still needs to be decided before product launch.

Draft for operational and legal review. Recheck this page whenever analytics, authentication, billing, embedded content or other third-party scripts are added.

Effective date: 30 October 2026
Operator: TODO: company legal name
Website: https://codecare.si

1. Current website behavior

Marketing pages on https://codecare.si remember the dark or light theme in local storage under the key codecare-theme. That preference stays in this browser until cleared and is not sent to CodeCare. The contact form sends the message you submit to the CodeCare API. The workspace at https://codecare.si/workspace/ sets two first-party cookies: codecare_session (httpOnly session JWT, SameSite=Lax, Secure on HTTPS, domain .codecare.si when COOKIE_DOMAIN is configured) and codecare_csrf (readable cookie used as a CSRF token). No analytics cookies are set. Paid checkout and the customer portal open on Dodo Payments' domain. Dodo is the merchant of record. Those pages may set cookies under Dodo's own policy. CodeCare does not set Dodo cookies on codecare.si. The site loads font files from Google Fonts; this external request may be subject to Google's own privacy and cookie practices. Consider self-hosting licensed font files before launch and verify the actual behavior with a browser storage audit.

2. What cookies and similar technologies do

Cookies are small values saved by a browser. Similar tools include local storage, pixels, SDKs and device identifiers. A production CodeCare service may need strictly necessary technologies for security, authentication, session continuity or user preferences. Any such use must be documented with the specific technology, purpose, duration and provider.

3. Analytics and preferences

No analytics provider or consent-preference interface is configured in this static site. Before adding analytics, identify the provider, events and data collected, retention period, any international transfer, and how users can opt out or change their choice. Do not add non-essential tracking until required notice and consent behavior has been confirmed.

4. Managing settings

You can manage or clear cookies and browser storage through your browser settings. The theme preference is saved in local storage and can be reset by clearing site data or removing the codecare-theme entry; until changed, a first-time visit uses the dark theme. The preference does not use a cookie.

5. Changes and contact

This policy should be updated when technologies change. Contact: privacy@codecare.si. Website: https://codecare.si.