Cookie Policy

This policy is current and in effect. It is under continuing review with counsel and may be updated; the version posted here is always the operative one.

Effective date: October 2026 · Last updated: October 31, 2026

1. What This Policy Covers

This Cookie Policy explains what The Consigliere LLC ("we", "us", or "our") does and does not do with cookies and similar technologies (local storage, session storage) on theaiconsigliere.com and in The Consigliere app (the "Service"). It supplements our Privacy Policy and does not replace it.

2. What We Actually Use

We built this policy from a direct audit of the live site and app source, not from a generic template. As of October 2026:

We do not use Google Analytics, advertising pixels, or advertising cookies. We do not run advertising or cross-site tracking on theaiconsigliere.com or in the app.

Our fonts come from our own site. Loading a page does not send a request to Google or any other font service.

Cloudflare Web Analytics is on for the website only. Our website pages load a Cloudflare JavaScript beacon (static.cloudflareinsights.com) for aggregate visit measurement. It is turned off in the app (app.theaiconsigliere.com): we do not measure what you read or which documents you open. It is not Google Analytics and is not used for advertising. Cloudflare documents this product as not using cookies. See Cloudflare Web Analytics and Cloudflare's Web Analytics docs. If we ever change where it runs, this section will be updated before the change.

Two Cloudflare protections add a script to website pages. Neither is advertising, neither tracks you across sites, and neither sets a cookie during an ordinary visit. We verified both by loading the live site and reading what the browser actually requested.

• Email address protection. Cloudflare rewrites email addresses in our pages so that automated harvesters collect less spam-ready text, and loads a small script (email-decode.min.js) that turns them back into readable addresses in your browser. It sets no cookie. See Cloudflare's documentation.
• Bot detection. Cloudflare loads a script from /cdn-cgi/challenge-platform/ that checks whether a visitor is an automated client, and reports the result back to Cloudflare. It helps keep automated traffic off the site. On an ordinary visit it sets no cookie. If Cloudflare does challenge a request, passing that challenge sets a cf_clearance cookie on this domain, which records that the challenge was passed so you are not asked again. It is a security cookie, not an advertising or analytics one. See Cloudflare's documentation.

Signing in does not set a cookie. When you sign in to The Consigliere, your session is stored in your browser's local storage, not in a cookie. This is a different technology with the same purpose: it lets the app remember that you're signed in between visits, and it stays on your device.

What the app keeps on your device. Besides your sign-in session, the app stores these in your browser:

• Your field and your role (both chosen from a fixed list), so the library opens to the documents written for you. These are also part of your account.
• The last three documents you opened, for Continue reading.
• Display choices: which library sections you have open or closed, whether you have hidden the "How this works" note or the tip about adding the app to your home screen, whether you arrived through an invitation link, and which account on this browser your saved field belongs to, so a second person who signs in here does not inherit it.
• Your answers in the Tools, until you use Clear my answers. Anyone else who uses the same browser can see them, so clear them when you finish on a shared or work computer.
• For one visit only (session storage), the page you were trying to reach before you signed in, so you land there afterward.

Apart from your field and role, none of this is sent to us or to anyone else. Signing out ends your session. The rest stays until you clear it or clear your browser's data for this site.

What the website keeps on your device. The website itself stores three small notes in your browser's local storage, and only when you act: the date until which the founding-year bar stays hidden after you close it (14 days), the date until which the Code card stays hidden after you close it (30 days), and a note that you have signed up for the Code, so the card is not shown to you again. None of this is sent to us or to anyone else, and none of it identifies you. Your email address, if you sign up, is sent only when you press the button.

The app keeps a copy of itself on your device. The web app installs a service worker that saves its own program files and images, so it opens quickly and still loads on a weak connection. It holds the app, not your documents or anything about you.

Adding the app to your home screen or desktop. This creates a shortcut to the same web address that opens in its own window. It does not install anything else, and we are not told that you did it.

We do not currently operate a cookie consent banner or preference center. We do not set advertising or tracking cookies ourselves, so there is currently nothing on our own site for such a mechanism to manage. If that changes, this policy and a preference mechanism will be updated together, before the change ships.

3. What Our Service Providers May Do on Their Own Domains

Some parts of the Service hand you off to a provider's own page or edge network, where that provider's own cookie practices apply, not ours. For the providers we use to operate the Service, what they process and why, see the Subprocessors list in our Privacy Policy; that list is maintained there so it stays current.

When you buy a plan, Stripe may set its own cookies for fraud prevention and payment processing on Stripe's domain if you complete a purchase through Stripe Checkout. See Stripe's privacy policy.

Cloudflare delivers our website and may, depending on traffic and security conditions, set its own cookies at the network edge for security and performance purposes. See Cloudflare's cookie policy.

We do not control what these providers set on their own domains, and this policy does not attempt to enumerate their cookies precisely. We point you to their own disclosures for specifics.

4. Email and Cookies

Transactional email delivery does not set cookies in your browser. See the Subprocessors list in our Privacy Policy for how we use email providers. If a marketing or content email you receive from us in the future includes open or click tracking, this policy will be updated before that happens; it is not in use today.

5. Your Controls

You can control cookies and local storage through your browser settings. Because we do not rely on tracking cookies to operate the Service, disabling cookies broadly should not affect core functionality; disabling local storage may sign you out and require you to sign in again each visit. Clearing your browser's data for this site removes everything listed in Section 2.

6. Changes to This Policy

We will update this policy if what we actually do changes, and we will not claim a mechanism, control, or practice that is not actually in place. If a consent or preference mechanism is ever built, this section and Section 2 above will be updated to reflect it accurately.

7. Contact

Questions about this policy: [email protected], The Consigliere LLC, 732 S. 6th St. #7569, Las Vegas, NV 89101.