COOKIE POLICY Effective date: 22 September 2026 · Last updated: 22 September 2026 1. Scope This Policy explains cookies and similar browser technologies on senriko.com, their purposes, when optional analytics is activated and how to change a choice. It forms part of the Privacy Policy (https://senriko.com/legal/privacy). A cookie is a small browser-stored text value. Local storage is browser-side storage. SENRIKO also uses server logs that are not cookies. 2. Categories - Strictly necessary: authentication, security, consent memory and core requested functions. Blocking these can prevent sign-in or another requested function. - Functional: language and optional interface preferences. - Analytics: measurement of selected public pages. It is enabled only after consent where consent is required. - Payment/anti-fraud: technologies used by Paddle when checkout is opened. Paddle determines its independent payment and fraud-processing purposes. SENRIKO does not display personalised advertising. Google ad_storage, ad_user_data and ad_personalization remain denied. 3. SENRIKO cookies Name | Category and purpose | Duration / access senriko_session | Strictly necessary; random Account session key | Up to 30 days; HttpOnly, Secure, SameSite=Lax senriko_signed_in | Necessary/functional; value indicating that the header may show Account navigation, without identity details | Up to 30 days; readable by interface scripts senriko_consent | Strictly necessary; remembers granted/denied optional-cookie choice | 1 year; SameSite=Lax NEXT_LOCALE | Functional; remembers language | 1 year senriko_lab_consent | Necessary for the /lab demonstration banner only | Browser session; /lab only _ga, _ga_ | Analytics; Google Analytics browser measurement after acceptance | Google configuration, commonly up to 2 years Cookie names can include a deployment-specific suffix. A security or framework update may change a necessary cookie name without changing its purpose; the table will be updated when material. 4. Local storage senriko.languageHint.dismissed records that a visitor dismissed the Russian-language hint and remains until site data is cleared. SENRIKO does not use browser fingerprinting, session replay or heatmaps. 5. Google Analytics and Basic Consent Mode SENRIKO uses Basic Consent Mode on all public pages, including /lab. Before a choice, the Google tag is not loaded and no analytics request is sent to Google. After Reject, it remains unloaded. After Accept, analytics storage may be granted and _ga cookies may be created, while advertising-related categories remain denied. GA4 may be used on selected public, sign-in and registration pages. It is not loaded in the Customer Account, administration area or public incident-share pages. A successful Contact form may emit an event without name, email, company, website or message fields. The /lab page may demonstrate its own consent banner using senriko_lab_consent, but that demonstration does not authorise Google requests before the visitor accepts the main SENRIKO analytics choice. 6. Paddle checkout technologies When a user opens Paddle checkout, Paddle may use cookies or similar technologies for the checkout session, payment security, tax, fraud prevention, preference and receipt functions. The applicable Paddle entity acts independently for those purposes and publishes its own privacy/cookie information during checkout. Paddle controls the cookies and similar technologies used in its hosted or embedded checkout for payment session, security, tax, fraud prevention, preferences and receipts. The current Paddle checkout and privacy notices apply to those technologies. If SENRIKO itself places a Paddle-related value in SENRIKO’s first-party context, SENRIKO lists that value, purpose and lifetime in this Policy after production verification. 7. Legal basis and choice Necessary technologies support a requested function, security and proof of choice and ordinarily do not require consent. Optional analytics is activated only after affirmative consent where required. Rejecting analytics does not prevent use of the public Site or core Service. The first choice must not be preselected. Consent can be withdrawn at any time through Cookie settings in the footer. Withdrawal stops future optional measurement but does not make earlier lawful processing unlawful. Where a consent banner is shown, Reject is available on the first layer with prominence and effort comparable to Accept. Closing or continuing to browse does not grant optional analytics consent. 8. Browser controls A browser can delete or block cookies and local storage. Blocking senriko_session prevents sign-in; blocking the consent cookie may cause the banner to appear again. Browser “Do Not Track” signals do not have one universally binding technical meaning, but SENRIKO applies the explicit choice made in Cookie settings and any binding signal required by applicable law. 9. Changes and contact Material changes are dated and, where appropriate, shown through the banner or Site notice. Questions may be sent to help@senriko.com. Operator details appear in the Legal Notice (https://senriko.com/legal/notice).