Complete content, not yet a final public notice
The product behaviour is described below. These remaining facts must be supplied and verified before this page is treated as final:
- Run a browser-level cookie and storage inventory on the final production deployment, including the bound sign-in provider.
- Reconcile this published inventory with the final hosting and identity-provider inspection before public activation.
- Keep optional analytics disabled until the lawful exception or consent route, preference control and withdrawal behaviour are verified.
The position today
Ordinary public browsing does not set a Contratallia workspace cookie. When you deliberately save a supplier or requested-update choice, Contratallia sets one strictly necessary first-party cookie so the same browser can find that private workspace again. Account authentication is not active, so there is no account-session cookie.
Optional Vercel Analytics is disabled by default and loads only when a production setting deliberately enables it. A final browser inspection is still required because hosting and future identity providers can add storage that application source code alone does not reveal.
Current and planned inventory
- Anonymous My suppliers workspace
- Active only after you save a workspace choice. The host-only `__Host-contratallia_free_workspace` cookie contains a random identifier, not your selections. It is HttpOnly, Secure on the deployed service and SameSite=Lax. It expires 365 days after the last successful workspace change and is removed when you delete the workspace. Contratallia receives it; browser scripts cannot read it.
- Sign-in and account security
- Not active. A separate inventory will be published if a bound identity provider later needs essential session or security storage.
- Your interface choices
- Not active. If introduced, the product will explain the preference it remembers and how long it lasts.
- Audience measurement
- Off. It will remain off until its exact fields, purpose, duration, lawful route and user control have passed production proof.
- Advertising or cross-site tracking
- None planned. Contratallia does not need this technology to provide the supplier catalogue.
How choices will work
Technology that is strictly necessary can operate without an optional choice because the requested service cannot work securely without it. Anything non-essential will stay off until the applicable consent or statutory-exception conditions are met and the user-facing control is ready.
Where consent is used, rejecting must be as easy as accepting, and changing your mind must be as easy as the original choice. Withdrawing an optional choice will not remove access to the free catalogue.
Your browser
You can delete the anonymous workspace from My suppliers or remove its cookie through your browser. Blocking it stops that browser from remembering My suppliers, but ordinary public browsing remains available.
Updates and contact
This page will be updated when the verified production inventory changes. Cookie and personal-information questions use the controller route at the end of Privacy. A Contratallia-specific privacy contact must be published before optional technology or live accounts are enabled.
Supplier changes, dated and sourced.
Explore Contratallia