Strictly necessary storage
The MVP uses an API-host-only HttpOnly session cookie when you sign in and a session-bound CSRF proof for protected actions. These are necessary to keep the account secure.
User-initiated providers
Google or Facebook receives an authentication request only when you choose that login option. Google Maps receives ordinary network and device request data when an on-site map loads, when an administrator searches for a place, or when you choose an external map or directions link. We do not use map interactions for advertising or analytics.
No optional tracking at launch
The MVP does not use advertising pixels, session replay or optional analytics cookies. If optional tracking is introduced later, this notice and the consent workflow must be updated before activation.