# Cookie Policy
> **DRAFT — pending review.**
We use cookies and similar technologies to operate the Service. Below is the categorized list. You can change preferences any time via the **Cookie Settings** link in the footer.
## Strictly necessary (always on)
| Cookie | Purpose | Duration |
|---|---|---|
| `__obd2_session` | Authenticated session | 30 days |
| `__obd2_csrf` | CSRF protection | session |
| `__obd2_locale` | Language preference | 1 year |
## Functional (opt-in)
| Cookie | Purpose | Duration |
|---|---|---|
| `__obd2_prefs` | UI preferences | 1 year |
## Analytics (opt-in)
We use a privacy-respecting analytics provider (e.g. PostHog or Plausible — final choice TBD). No cross-site tracking, no fingerprinting, no advertising IDs.
## No advertising cookies
We do not use advertising cookies. We do not share data with ad networks.
## Do Not Track / GPC
We respect the Global Privacy Control (GPC) browser signal as an opt-out of any non-essential processing under U.S. state privacy laws.