Cookie policy

Scope and status

Version 2026-11-05.1 · 5 November 2026. This register combines source configuration and browser observations of the local website and the existing published movera.global site. The local update is not yet verified as deployed. Hosting-added event purposes and cookie behavior require supplier review; this is not a claim that the website is tracking-free.

Necessary delivery and preferences

The website and its delivery/security services process requests to load and protect pages. Cookie rules apply to comparable technologies as well as traditional cookies. We do not classify unrelated analytics, advertising or convenience features as necessary merely because they accompany a service. Theme storage records an explicitly chosen display preference; consent storage remembers your choices. Navigation restoration supports the current browsing session.

Optional media and your choice

Accept all explicitly enables the available optional third-party media category. Reject optional disables it. Customize lets you choose media without enabling advertising or analytics. The current application has no advertising, customer-matching, personalization or analytics integration to opt into. Supported future embeds disclose YouTube and Google Maps; no such embeds are currently published. Adding another provider requires classification and a notice/consent review first.

Before media permission, the shared renderer does not create the external frame or fetch a provider thumbnail. It can show a first-party cover, readable address, a normal external viewing link and Play here or View here to open Cookie preferences. External links are deliberate navigation choices, not a separate way to authorize an embedded player.

Remembering and withdrawing choices

Validated choices are saved for 180 days on this site’s origin. Missing, malformed, expired, future-dated or incompatible records grant no optional permission. Acceptance and rejection are both remembered; preferences synchronize across same-origin tabs. Different domains and unrelated environments do not silently share a choice. If storage is blocked, optional media remains off and the control offers a retry path.

Reopen Cookie preferences at the bottom of any page to change or withdraw your choice. Withdrawal removes optional frames and prevents future optional requests through the shared renderer, including in other open tabs. The site cannot directly delete cookies already held on a third-party provider’s domain; provider controls and browser settings may be needed for those copies. Browser settings are not the site’s only refusal mechanism.

Observed storage register

movera-privacy-choice · first-party · localStorage · purpose: remember explicit category/provider choices and notice version · category: privacy-choice record · lifetime: 180 days, invalidated by material policy change. Created only when you make a choice; it contains no random visitor or advertising identifier.

movera-theme · first-party · localStorage · purpose: your chosen light/dark display · category: requested preference · lifetime: until cleared; no code-defined expiry. No value is created on a fresh visit until you choose a theme.

tsr-scroll-restoration (when TanStack navigation restoration executes) · first-party · sessionStorage · purpose: restore navigation scroll positions · category: navigation preference · lifetime: browser page session. Runtime verification of the dynamic entries is recorded separately; no analytics purpose is assigned.

__cf_bm · Cloudflare / .movera.global · cookie observed on the existing live site · purpose: provider bot-management/security according to Cloudflare documentation · observed expiry: about 30 minutes in the captured session. Necessity and provider settings require review; the application does not set this cookie.

__dpl · movera.global · hosting-added cookie observed on the existing live site · observed expiry: about 24 hours. Purpose, category and provider documentation are not yet confirmed; it is not labeled essential by this policy. Hosting-added /~flock.js and /__l5e/events…js were observed with a /__l5e/trackevents request before any app consent. These are separate from source-controlled media; their controls must be confirmed with the hosting service.

No third-party media cookies, advertising pixels or analytics storage were observed in the initial local browser checks. Absence in this check does not establish every possible provider behavior. The unused sidebar component can set a sidebar_state preference, but no published page renders it; it is not listed as an active cookie. Preview-editor authentication is separate from public visitor journeys and must not be confused with consent.

Network services and changes

Fonts are hosted with the updated application; Google Fonts connections present in the earlier published version are removed locally. Brand imagery is delivered through same-origin asset paths. Security/network logging and hosting-added event reporting are not cookie-storage entries and need separate purpose, payload and retention review. Any future optional script or rich-text embed must use the centralized permission check; unknown embeds remain inert rather than loading first and being classified later.