1. Required sessions
Authentication, CSRF protection, checkout, language and security may require cookies or equivalent browser storage. These are not used as advertising profiles.
2. Display preferences
Theme, reading mode, text zoom and related display settings may be stored locally in the browser and normally remain device/subdomain-specific.
3. Analytics and marketing
Non-essential analytics, advertising or profiling tools must only be enabled after proper configuration and, where required, valid consent. They are not required by the base installation.
4. External media
Maps, videos, translation services and social-media widgets may trigger third-party processing. Privacy-friendly placeholders or deliberate activation should be used where appropriate.
5. Withdrawal and browser controls
Optional consent should be as easy to withdraw as to give. Users can also clear or block browser storage, although required features may then stop functioning.