Privacy controls
Cookie and browser-storage policy
Effective September 5, 2026. Repository code uses one named first-party browser preference and conditionally loads GA4 only after consent; production-created cookies and hosting storage still require live verification.
Reviewed Sep 5, 2026
Storage observed in the application
- govinfluence.analytics-consent
- Provider: Gov Influence, in browser localStorage. Purpose: remember granted or denied optional-analytics choice. Classification: preference storage. Duration: no fixed code expiry; it remains until changed through the control or cleared in the browser.
Optional GA4 storage
The Google tag is not requested until analytics is fully configured and the visitor chooses Allow analytics. Advertising storage, ad personalization, and ad user data are denied in code; Google Signals and advertising-personalization signals are disabled in the tag configuration. GA4 may create browser identifiers after consent, but their actual production names, domains, and durations have not been observed and are not listed as verified facts.
Kit, analyst, and hosting
The repository does not create a Kit or analyst browser cookie. A configured Kit form posts into a hidden response frame only after submission; any production third-party storage still requires live verification. The analyst uses server requests and page state. Vercel or security infrastructure may use operational storage, but its actual production names and duration are an external gate.
Changing or withdrawing the choice
Use Cookie preferences to choose Allow analytics or Decline. Declining updates future consent in the current browser. The current control does not delete identifiers that GA4 may already have created, so use browser controls to remove existing cookies or site data. Clearing localStorage also removes the saved choice and may cause the prompt to appear again.
Production verification gate
The owner must still inspect browser storage and network requests before consent, after consent, after withdrawal, and after Kit submission; verify GA4 account settings; record every observed name, provider, purpose, and duration; and obtain appropriate legal review. Public indexing does not verify these external settings. This policy will be updated if the observed behavior differs.