1. What we use today
| Name | Type | Purpose | Duration |
|---|---|---|---|
| trelyan-ride-cookie-ack | Local storage | Remembers that you acknowledged the cookie notice | Until you clear site data |
| Hosting / CDN cookies | HTTP cookie (if set by the host) | Load balancing, TLS, bot mitigation — essential to deliver the site | Set by Vercel, Netlify, or your host; typically session to months |
| Waitlist POST | None required | JSON to /api/waitlist; not a tracking cookie | n/a |
Fonts may be served by next/font (self-hosted at build) rather than a runtime Google Fonts cookie. If a deployment is misconfigured to hit fonts.googleapis.com at runtime, that is a third-party connection we will treat as requiring review.
2. What we do not use in the default build
- Advertising cookies, conversion pixels, or social retargeting.
- Third-party analytics (no GA4, no Mixpanel) unless an operator later enables them.
- Cross-site tracking for a “sale” or “share” under CPRA.
3. If analytics are added
Any non-essential cookie or similar tracker will be listed here, default-off in the EEA/UK and Switzerland where consent is required, with a real choice — not a pre-ticked box. That change would be a material privacy update.
4. Managing storage
You can clear local storage and cookies in your browser. Essential delivery may then re-set host cookies. See also Privacy Policy.
5. Legal bases
Essential storage: legitimate interests / strictly necessary. Acknowledgement flag: legitimate interests to not re-show the banner every pageview; you may delete it. Consent: only if we add non-essential trackers.