DRAFT — verify on the deployed website and supported browsers before publication.
Effective: Not effective — draft preview. Operator: Jolts Inc..
This notice describes browser storage used by Jolts at https://jolts.xyz/. Cookies are small values stored by your browser and sent under defined conditions; local storage and SDK identifiers can serve related purposes. Privacy rules may apply to device storage/access regardless of whether a technology is called a cookie or an ad is described as contextual.
Current application inventory
| Mechanism | Observed code / proposed explanation | Duration and verification |
|---|---|---|
| Theme preference | First-party theme cookie set when the appearance endpoint receives a valid preference; remembers system/light/dark |
Code expiry is one year; SameSite=Lax, HttpOnly, Secure on HTTPS. Verify actual deployed response and any refresh behavior |
| Rails form/session security | Enquiry form uses Rails form and CSRF mechanisms; session storage may support this | Verify actual cookie name, scope, expiry, attributes and necessity in a clean deployed-browser session |
| Rate limiting and operational logs | Server-side form protection and request handling | Do not call all server records cookies; document relevant data in the Privacy Notice |
| Third-party advertising/analytics storage | Not found in inspected website scripts | Verify network requests, CDN/proxy additions, embedded media and deployment configuration; do not imply a future platform will be tracking-free |
Do not substitute guessed provider names or durations. Development/test behavior is not sufficient evidence of production storage. Recheck when adding scripts, consent tools, payment pages, embeds, SDKs or tag managers.
Choices
You can manage browser cookies through your browser settings. Removing a theme preference resets that preference; blocking necessary security storage may affect forms. Browser controls do not replace a consent or opt-out mechanism that the service is legally required to provide.
Before introducing non-essential advertising or analytics storage, assess the applicable laws and implement a choice mechanism that blocks it until required permission exists. Explain purposes and relevant providers, offer a practical way to decline and withdraw, and record the choice. Do not bundle optional advertising permission into agreement to website terms. Do not deploy a decorative banner that fails to control the actual requests.
Platform launch inventory — not yet active
Complete one row per actual cookie, SDK/storage key or equivalent technology: name; provider and recipient; property; data stored/accessed; exact purpose; first/third-party status; duration and refresh; geographic scope; required basis; default before a choice; consent/opt-out control; downstream recipients; and verification date/evidence. Assess cross-context advertising and legally required preference signals independently of the label “contextual”.
Publisher-hosted storage requires coordinated responsibilities: who supplies the notice, gathers and records choices, sends signals to the Operator, changes processing and responds to withdrawal. Contractual allocation alone does not prove the technical implementation works.
Questions or storage concerns: contact@jolts.xyz. Related information: https://jolts.xyz/legal/privacy-notice.