Always on
Essential cookies
Required for core site operation, security, load balancing, language routing, cookie preference storage, accessibility settings and fraud prevention. These are not used for optional advertising or analytics.
Cookie Policy
Consent preference console
Essential cookies
Always on
Last updated: 7 August 2026
This policy should be read with our Privacy Policy. It explains which storage is essential and which storage depends on your consent.
Required for core site operation, security, load balancing, language routing, cookie preference storage, accessibility settings and fraud prevention. These are not used for optional advertising or analytics.
Remember preferences such as theme, language, learning state, saved generators and user interface choices so the site works the way you selected.
Help us understand aggregate site usage, broken journeys and feature performance. We use analytics only when you opt in, and we configure it to minimise personal data where possible.
May support relevant communications, campaign measurement or demo follow-up. These remain off unless you choose to accept them.
Full disclosure
No cookie policy should hide behind vague categories. Here is every cookie or local-storage item TrustStack sets today, and why. We do not currently load any analytics, advertising or social-media trackers - if that ever changes, this table will be updated first and consent will be asked before any non-essential cookie fires.
| Name | Party | Category | Duration | Purpose |
|---|---|---|---|---|
| NEXT_LOCALE | First-party | Functional | 1 year | Remembers the language you chose so the site doesn't reset it on every visit. |
| sb-*-auth-token | First-party (Supabase) | Essential | Length of your signed-in session | Keeps you signed in to your TrustStack account. Set only after you sign in. |
| truststack-device | First-party | Essential security | 30 days when device-session enforcement is enabled | Identifies a browser session using a random token so concurrent-device limits and account-sharing controls can be enforced. The server stores only its SHA-256 hash. |
| dpdp-consent | Browser local storage (not a cookie) | Essential | Until you change or clear it | Stores the cookie choices you made in this banner, so we don't ask again every visit. |
| dpdp-theme, dpdp-reading, dpdp-a11y-v4, anixai-theme | Browser local storage (not cookies) | Functional | Until changed or browser storage is cleared | Remembers visual theme, easy-read mode and accessibility settings selected on this device. |
| dpdp-progress, dpdp-quiz-best, dpdp-risk-v1, dpdp-know-section-dismissed | Browser local storage (not cookies) | Functional | Until reset or browser storage is cleared | Stores local learning progress, quiz score, risk-check state and dismissed educational prompts. |
| dpdp-lexbot-chat | Browser local storage (not a cookie) | Functional | Until chat is cleared or browser storage is cleared | Keeps recent TrustChat messages on this device so the conversation can continue after navigation. |
Consent controls
Non-essential cookies are not required to browse TrustStack. Giving consent is a choice, and withdrawing it is built into the same preference layer.
Cookie preference records are kept only as long as needed to remember and demonstrate your choice. Optional analytics or marketing identifiers are retained under the limits set by the relevant provider and our configuration, and are not used after you withdraw consent.
We may use processors to host the website, store preferences, measure consented analytics or deliver communications. They must process cookie and device data only on our instructions and protect it with appropriate safeguards.
For privacy or cookie requests, contact consult@anixai.io. The same monitored channel accepts grievances and DPDP rights requests. See the Privacy Policy for your DPDP rights.