// scope
This policy covers cookies and browser local storage set by this website. It does not cover cookies set by third-party services we link to or by client applications we host (which are governed by their own policies and any Data Processing Agreement we have with you).
Last updated: August 16, 2026 · Effective immediately
1. What cookies are
A cookie is a small text file a website can place on your device. Sites can also use related technologies such as browser local storage, session storage, and IndexedDB. This policy uses "cookies" as a familiar shorthand while describing all such storage the site uses.
2. How we ask for consent
When you first visit, we show a consent banner that lets you accept or reject non-essential cookies. Strictly-necessary cookies (consent state, security, theme preference) are always set because the site does not function without them. Analytics cookies load only after you click Accept. You can revisit your choice at any time using the link in the footer (where available) or by clearing storage in your browser.
3. Categories of storage we use
3.1 Strictly necessary
These are required for the site to work and cannot be turned off in our consent banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
cookie_consent | localStorage | Remembers the choice you made in the consent banner. | Until cleared in your browser |
theme | localStorage | Remembers whether you selected the light or dark appearance. | Until cleared in your browser |
__Host-next-auth.csrf-token and related | cookie (HttpOnly, Secure) | CSRF protection for authenticated areas of the site. | Session or 30 days, depending on the cookie |
__Secure-next-auth.session-token | cookie (HttpOnly, Secure) | Maintains your authenticated session on dashboard / admin pages. | Session or 30 days |
3.2 Analytics (optional)
These load only after you click Accept in the consent banner. They help us understand which pages are useful and where to invest.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes unique users for aggregated analytics. | 13 months |
_ga_<container-id> | Google Analytics 4 | Stores session state for the GA4 property. | 13 months |
Google Analytics 4 is configured to anonymize IP addresses and to disable Google Signals, ads personalization, and remarketing. We do not use any other Google services (Ads, AdSense, reCAPTCHA with tracking). For Google's privacy practices see policies.google.com/privacy.
3.3 Functional (optional, where applicable)
The site may also embed functional widgets from service providers we use (for example, a calendar or scheduling widget). These widgets may set their own cookies if you interact with them; their privacy policies apply. We list the current set at /legal/subprocessors.
3.4 We do not use
- Advertising cookies or ad-tech tracking pixels.
- Cross-site behavioral advertising or retargeting.
- Social-media tracking pixels (Facebook, LinkedIn, TikTok, etc.).
- Fingerprinting or device-graph tracking.
4. Analytics details
We use Google Analytics 4 only with consent. GA4 is configured with analytics_storage: granted only after consent and ad_storage: denied at all times. IP addresses are anonymized in transit. We do not share the GA data with any other Google service.
The data we collect is aggregated and used to answer questions like which pages are read, where in the world readers are (at country level), and which call-to-action buttons are clicked. We do not use it to identify you.
5. Third-party cookies
When we link to or embed a third-party service (for example, a video, document, or social share button), that third party may set its own cookies. We link to the privacy policies of each third-party service we embed at /legal/subprocessors. We use rel="noopener noreferrer" and referrerpolicy="no-referrer" on outbound links to limit referrer leakage.
6. Do Not Track and Global Privacy Control
Our consent banner honors the Global Privacy Control (GPC) signal as a request to reject non-essential cookies. Where required by law (including in California), we treat GPC as a valid opt-out of "sale" or "sharing" for the browser sending the signal. We do not respond to the older Do Not Track header because there is no industry standard; we treat it as a hint and apply the same effect.
7. Managing cookies in your browser
Most browsers let you inspect, block, or delete cookies and storage through privacy or site settings. Common browser help pages:
- Safari: Preferences → Privacy → Manage Website Data.
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Preferences → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions → Cookies and site data.
Blocking strictly-necessary cookies will break parts of the site (you may be logged out or unable to submit forms). Blocking analytics cookies only prevents us from measuring usage.
8. Changes to this policy
We may update this policy as the site and the third-party services it uses change. The revision date at the top of this document identifies the current version. Material changes will be reflected in the consent banner on your next visit.
9. Contact us
Questions about this policy can be sent to privacy@empowered.guru or through our contact page.