Cookie Policy

    Last updated: April 28, 2026 (v1.0)

    ARD Sentinel™ uses only essential cookies for dashboard operation, authentication, and billing. We do not use marketing or analytics cookies without explicit consent.

    TL;DR

    Strictly necessary cookies only. No tracking, no advertising profiling. The cookie banner on first visit explains your options.

    1. What are cookies

    Cookies are small text files a website stores in your browser. They help remember state (e.g. login session) between visits.

    2. Cookies we use — strictly necessary

    These are always active. Without them the dashboard cannot function. No consent required per ePrivacy Directive (2002/58/EC) "strictly necessary" exception.

    • __session — Firebase Auth session (5 days)
    • firebase-auth.refresh-token — token refresh (60 days)
    • __cfduid — Cloudflare DDoS protection (30 days)
    • nextjs.csrf — CSRF protection (session)
    • __stripe_mid / __stripe_sid — Stripe checkout protection (1 year / 30 min, only on /billing)

    3. Cookies we do NOT use

    • No marketing cookies (Google Analytics, Meta Pixel, LinkedIn, etc.)
    • No functional preference cookies (yet)
    • No third-party advertising tags
    • No fingerprinting or device tracking

    If we ever introduce optional cookies, we will request your explicit opt-in via a cookie banner per Art.7 GDPR + ePrivacy.

    4. How to manage cookies

    In your browser:

    • Chrome: Settings → Privacy and security → Cookies and other site data
    • Firefox: Settings → Privacy & Security → Cookies and Site Data
    • Safari: Preferences → Privacy → Manage Website Data

    Note: Blocking strictly necessary cookies will prevent dashboard login.

    5. Third-party cookies

    Some cookies are set by our service providers:

    • Firebase (Google Cloud) — authentication
    • Stripe — payment fraud prevention
    • Cloudflare — DDoS protection

    These parties are our processors per Art.28 GDPR. Full list in our Sub-processors page.

    6. Changes to this policy

    For material changes (e.g. introducing optional cookies), we will:

    • Show a banner for 30 days
    • Email active customers
    • Update this document with a new version

    7. Contact