Cookie Policy (outline)

Outline for counsel — not legal text

Re-check the cookie list against the production site at launch. If any analytics, advertising or embedded third-party content is added, it needs consent before it loads (KVKK Authority cookie guidance, ePrivacy for EU users), and this page must list it.

Cookies set today

demostatics-web sets only cookies needed for the site to work. No analytics or advertising scripts were found in its templates.

Cookie	Set by	Purpose	Expires
demostatics_session	demostatics.com	Keeps you signed in during a visit; encrypted	2 hours of inactivity (SESSION_LIFETIME=120)
XSRF-TOKEN	demostatics.com	Protects forms against cross-site request forgery	With the session
remember_web_…	demostatics.com	Keeps you signed in across visits — only if you tick Remember me	Long-lived until sign-out (TODO: confirm)

docs.demostatics.com sets no cookies; it stores your light/dark theme choice in your browser’s local storage only.

Sections the policy needs

1. What cookies and similar technologies are
2. The list above, grouped as strictly necessary (no consent needed) and any others (consent needed)
3. How to refuse or delete cookies in the browser
4. Changes to this policy and its date
5. Link to the Privacy Policy