Cookie & Local Storage Policy

1. Current public website position

The V61 public website is designed to function primarily without advertising cookies. Essential browser or server-side technologies may be used where necessary for security, request handling, preferences or platform operation.

2. Protected staff application

The production Document Automation application authenticates staff with a Secure, HttpOnly, SameSite session cookie. The real authentication token is not exposed to browser JavaScript or retained in localStorage. A non-secret compatibility marker may be stored locally so the legacy interface can request the server-managed session; it is not a credential and cannot authenticate independently.

3. Types of technologies

• Strictly necessary: authentication, security, fraud/abuse prevention, load/session operation and user-requested functions.
• Preferences: language or interface choices where implemented.
• Analytics: measurement tools may be introduced only after they are documented and, where required, subject to an appropriate consent mechanism.
• Advertising/marketing: no advertising technology should be enabled merely by describing it in this policy; any future use must be separately assessed and disclosed.

4. Consent and controls

Where applicable law requires consent before a non-essential technology is stored or accessed on a user's device, SMG should request that consent before activation and provide a practical way to withdraw or change the choice. Refusing optional technologies should not disable core functions that do not depend on them.

5. Third-party content

Links to third-party websites do not by themselves mean SMG controls their cookies. If third-party scripts, embedded media, analytics or similar services are added directly to SMG pages, their storage and data flows must be assessed and reflected here and in the Privacy Notice.

6. Managing storage

Browser settings can usually display or delete cookies/site storage. Removing required authentication storage may sign a user out or reset preferences. Staff should use the platform's Log out function on shared or untrusted devices.

7. Updates

This policy should be updated before materially new tracking or analytics technology is enabled. Privacy questions may be sent to roman@shevchenko-group.com.