Cookie Policy

Cookie Policy

Company details: Legal entity name, company number, registered office, VAT number, and ICO registration (if applicable) are configured by administrators and shown when available. Until configured, treat references to the controller identity as incomplete placeholders — not invented registrations.

1. What this policy covers

This Cookie Policy explains how Rackstead uses cookies and similar technologies on our websites and control panel. Read it with our Privacy Policy.

2. What cookies are

Cookies are small text files stored on your device. Similar technologies include local storage used by the browser for UI state.

3. How we use cookies

Necessary (always on)

Required for security and core functionality:

• Auth.js session, CSRF, and callback cookies for sign-in
• `rackstead.oauth_link` — short-lived signed cookie for safe OAuth account linking while logged in
• `rackstead.cookie_consent` — stores your cookie choices

Preferences

Optional preference cookies are only set if you enable the Preferences category. Locale/currency preferences for signed-in users are primarily stored on your account, not as marketing cookies.

Analytics

Not currently enabled. Rackstead does not ship a first-party analytics tracker or advertising pixel in the current frontend. If analytics are introduced later, they will require consent (except where strictly necessary) and this policy will be updated.

Marketing

Not currently enabled as browser cookies/pixels. Email marketing is handled separately via explicit opt-in in Communications settings.

4. Third-party cookies during optional flows

When you use Stripe, PayPal, or OAuth providers (Google/GitHub/Discord), those providers may set their own cookies on their domains during the redirect or checkout. Those cookies are governed by the provider's policies.

5. Managing cookies

Use the cookie banner (Accept all / Reject non-essential / Manage preferences) or Settings → Cookie Preferences. You can also control cookies in your browser. Blocking necessary cookies may break sign-in and checkout.

6. Contact

Privacy contact as published in Company Details.