CANOPY LEDGER

Draft, pending legal review

Cookie Policy

Effective date: [EFFECTIVE DATE]

This Cookie Policy explains how [COMPANY LEGAL NAME] ("Canopy Ledger," "we," "us," or "our") uses cookies and similar technologies on our marketing website (the "Site") and in the Canopy Ledger web application (the "Service"). It should be read together with our Privacy Policy.

1. What Are Cookies?

Cookies are small text files that a website stores on your browser or device. Similar technologies include local storage, session storage, and pixels. We refer to all of these as "cookies" in this policy.

  • First-party cookies are set by us.
  • Third-party cookies are set by another company, such as an analytics provider.
  • Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them.

2. Categories of Cookies We Use

2.1 Strictly necessary

These cookies are required for the Site and Service to work. They enable core functions such as security and load balancing. The Service does not currently set an individual sign-in cookie, because it does not yet have individual sign-in. When the demo is protected by a shared access password, the canopy_demo cookie remembers that you entered it. Strictly necessary cookies are always on, because the Site and Service would not function properly without them.

2.2 Analytics

These cookies help us understand how visitors use the Site, for example which pages are visited, how long visitors stay, and how they arrived, so we can improve the Site and our content. The Service itself does not use analytics cookies. [OWNER: if the Site uses one, name it here:] We may use [ANALYTICS PROVIDER] for this purpose. Where required by law, analytics cookies are set only after you give consent through our cookie banner.

2.3 Preferences

These cookies remember choices you make, such as interface settings, so you have a more consistent experience. In the Service, the canopy_theme cookie remembers the display theme you pick. Where they are not strictly necessary, we set them only with your consent where required by law.

We do not use advertising or cross-site targeting cookies. If that changes, we will update this policy and ask for your consent where required.

3. Cookies in Use

NameProviderCategoryPurposeDuration
canopy_themeCanopy Ledger (first party)PreferencesRemembers your display theme: color preset, light or dark mode, density, and accent color1 year
canopy_demoCanopy Ledger (first party)Strictly necessaryRemembers that you entered the shared demo access password, so you aren't asked again on each page. Set only when the demo password is turned on30 days

*Developer note: this is the only cookie the Service sets today (first-party, SameSite=Lax). Add any cookies set by the marketing Site before publishing.*

Cookie banner. The Service does not set analytics or advertising cookies, so it does not show a cookie banner. [OWNER: if the marketing Site sets analytics or other non-essential cookies, add a banner with accept, reject, and choose options plus a "Cookie Settings" footer link, and describe them here, before publishing.]

Changing your choices. You can change your theme at any time from the account menu, or delete the canopy_theme cookie in your browser.

Browser settings. Most browsers let you view, block, or delete cookies. Blocking strictly necessary cookies may prevent the Site or Service from working properly. Browser help pages explain how to do this.

Global Privacy Control. Where required by law, we honor Global Privacy Control (GPC) signals as an opt-out of non-essential cookies that would be considered a "sale" or "sharing" of personal information. We do not sell or share personal information for advertising.

Analytics opt-out. Some analytics providers offer their own opt-out tools. See [ANALYTICS PROVIDER]'s privacy documentation for details.

5. Changes to This Policy

We may update this Cookie Policy when we change the cookies we use or for legal or operational reasons. We will post the updated policy here with a new effective date and, where required, ask for your consent again.

6. Contact Us

Questions about this policy? Contact us at [CONTACT EMAIL] or write to [COMPANY LEGAL NAME], [BUSINESS ADDRESS].