Legal
Cookie Policy
Last updated 2026-04-08
Notice
This is a placeholder template prepared for product review. Final legal text must be reviewed by qualified counsel before public launch. It does not constitute legal advice.
RuleSell uses cookies and similar technologies to operate the marketplace, remember your preferences, and (with your consent) measure how the service is used. This policy explains what each category does and how you can control them.
What is a cookie
A cookie is a small text file stored on your device by your browser when you visit a website. It can hold a session token, a preference, or an identifier. Similar technologies include localStorage, sessionStorage, and small first-party requests; this policy covers all of them collectively as "cookies".
How we ask for consent
On your first visit you see a cookie banner with three equally weighted choices: Accept all, Reject all, and Customize. You can change your choice at any time from /dashboard/settings/privacy. We treat the absence of consent as a refusal. Consent records are stored locally as a tamper-evident audit trail (DSA Art. 25, GDPR Art. 5(3)).
Cookie categories
Strictly Necessary cookies are required for the site to function and cannot be turned off. They include session cookies, CSRF tokens, locale preference, and the consent record itself. Functional cookies remember non-essential preferences such as theme. Analytics cookies help us understand which pages are useful in aggregate. Advertising cookies measure paid placements; we do not use them for cross-context behavioural advertising at launch.
Cookies we set
rulesell:consent — purpose: store consent choices; duration: 12 months; provider: RuleSell; category: Strictly Necessary. NEXT_LOCALE — purpose: language preference; duration: 12 months; provider: RuleSell; category: Strictly Necessary. gpc_honored — purpose: record that the Sec-GPC signal was honored; duration: session; provider: RuleSell; category: Strictly Necessary. dev:persona — purpose: development persona switcher (non-production only); duration: 30 days; provider: RuleSell; category: Strictly Necessary.
Global Privacy Control
If your browser sends the Sec-GPC: 1 header, RuleSell treats it as a valid opt-out of the sale and sharing of personal information under CCPA/CPRA. The opt-out applies regardless of your cookie banner choices and persists across sessions.
How to control cookies
You can change your consent at any time from /dashboard/settings/privacy. You can also clear or block cookies through your browser settings. Blocking strictly necessary cookies will break parts of RuleSell, including signing in.