Essential by default.

PulseDeck uses the HttpOnly pd_session cookie after sign-in to authenticate a user and bind requests to a workspace. OAuth connections also use a short-lived HttpOnly verifier cookie for state and PKCE validation.

The reference deployment does not load optional advertising cookies. If a buyer adds analytics or advertising tags, they must keep those tags disabled until the visitor gives the relevant consent and update this notice with provider, purpose, duration, and transfer information.

The preference banner stores pulsedeck-consent-v1in local storage. It records the visitor's choice but is not sent to the server.

This operational notice requires legal review for the final operator, jurisdiction, and tracking stack. See the privacy notice.