We use cookies and browser storage to keep you signed in, secure your session, and remember your preferences. We use only the minimum necessary by default; analytics and personalisation cookies are off until you opt in.
| Category | Examples | Required? | Retention |
|---|---|---|---|
| Strictly necessary | Auth session, CSRF token, 2FA challenge | Yes | Session / 30 days |
| Functional | Theme, language, last-viewed shipment | No (opt-in) | 1 year |
| Analytics (anonymised) | Page views, error reports | No (opt-in) | 13 months |
| Marketing | None — we don't run ad campaigns | — | — |
You can change your consent any time using the "Cookie preferences" link in the footer. You can also block cookies in your browser settings — note this may break parts of the site that require sign-in.
For local-first features (track-while-offline, draft letters, signed PDFs) we use localStorage within the mgr.* namespace. We never store payment card data or full ID document scans in the browser.