# Cookie Policy

**Last Updated:** May 9, 2026

**Version:** 2.0.0

**Effective Date:** May 9, 2026

---

## 1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, work more efficiently, and to provide reporting information. We also use similar technologies such as local storage, session storage, IndexedDB, pixel tags, and SDK identifiers; for the purposes of this Policy, all are referred to as "cookies".

## 2. Legal Framework

Our use of cookies is governed by:

• EU ePrivacy Directive 2002/58/EC (as amended) — "Cookie Law"
• EU General Data Protection Regulation (GDPR) — Reg. (EU) 2016/679
• UK Privacy and Electronic Communications Regulations (PECR)
• National implementations (e.g., German TTDSG, French law as enforced by CNIL)

For all non-essential cookies we obtain prior, freely-given, specific, informed and unambiguous consent through our Cookie Consent banner. Consent is recorded with timestamp, version and category for audit purposes, and can be withdrawn at any time at no cost.

## 3. Cookie Categories

STRICTLY NECESSARY (always active, no consent required):
• Purpose: authentication, session security, CSRF protection, load balancing
• Examples: arc_session, csrf_token, auth_state
• Duration: session or up to 24 hours
• Provider: Arc Pilot (first-party)

PREFERENCES (consent required):
• Purpose: remember language, theme, layout, accessibility
• Examples: arc_locale, arc_theme, arc_layout
• Duration: up to 12 months
• Provider: Arc Pilot (first-party)

ANALYTICS / PERFORMANCE (consent required):
• Purpose: aggregated usage analytics, error reporting, performance monitoring
• Examples: ph_*, _vercel_*, _vercel_speed_insights
• Provider: PostHog, Vercel Analytics, Vercel Speed Insights (third-party)
• Duration: up to 13 months (anonymized after 90 days where possible)

MARKETING (consent required):
• Currently NOT used. We do not run third-party advertising or cross-site tracking. If this ever changes, you will receive a fresh consent prompt.

## 4. Managing Your Preferences

You can review or change your cookie preferences at any time:

• Click "Cookie Preferences" in the footer
• Open Settings > Privacy > Cookie Preferences inside the app
• Use your browser's privacy settings (note: this may not affect all storage technologies)

Withdrawing consent is as easy as giving it. Strictly necessary cookies cannot be disabled because the Service cannot function without them.

## 5. Updates to this Cookie Policy

We will update this Cookie Policy whenever there is a material change to the cookies we use. The "Last updated" date at the top reflects the most recent change. When changes affect non-essential cookies you will see a fresh consent prompt.

## 6. Contact

Questions about cookies? Email privacy@arc-pilot.com or our DPO at dpo@arc-pilot.com.

---

_Contact: privacy@arc-pilot.com_