> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grantex.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Cookie policy

# Cookie Policy (Draft)

**Status:** Draft. Subject to legal review.
**Last reviewed:** 2026-05-24
**Applies to:** the marketing site (`grantex.dev`), the documentation site (`docs.grantex.dev`), and the developer portal (`grantex.dev/dashboard`).

This page describes the cookies and similar storage mechanisms used by the public Grantex sites today, based on what is wired up in this repository. Grantex is owned by Orchestrum Technologies LLP; inventor and owner: Sanjeev Kumar. **Self-hosted Grantex deployments serve the marketing site only if the operator publishes it; the analytics cookie below is in the source under the Orchestrum-controlled GA ID and is easy to remove for a fork.**

## Categories in use

### Strictly necessary

These are required to operate the developer portal and consent UI. They cannot be disabled.

| Name | Purpose | Set by | Duration |
| - | - | - | - |
| `__session` | Developer-portal authenticated session | `apps/portal` | Session |
| `csrf` | CSRF double-submit token on consent and portal forms | auth-service consent challenge route | Session |

No third-party cookies are set by the auth-service or the developer portal.

### Analytics

The marketing site only uses Google Analytics for aggregate traffic data, which we use to decide where to invest in docs and integrations.

| Name | Purpose | Set by | Duration |
| - | - | - | - |
| `_ga`, `_gid`, `_ga_*` | Google Analytics aggregate site traffic | Google Analytics (GA4 property `G-DNXYVLS5NY`) | Up to 2 years |

You can opt out of Google Analytics by using a browser extension such as the official Google Analytics Opt-out, by enabling Do Not Track, or by blocking the `googletagmanager.com` and `google-analytics.com` domains in your browser. The marketing site does not currently surface a per-visitor banner-style consent prompt. **TBD:** a CMP-style consent banner is on the follow-up list for the EU launch — see `docs/reports/enterprise-readiness-brutal-review-2026-05-24.md` item H-3 (legal-link work).

### Marketing / advertising

None. Grantex does not currently run third-party ad pixels (no Facebook Pixel, no LinkedIn Insight Tag, no Google Ads tag) and does not retarget visitors.

### Session replay or behavioural recording

None. No session-replay tooling (FullStory, Hotjar, LogRocket) is referenced anywhere in the repo.

## Local / session storage

The interactive playgrounds (`web/commerce-playground.html`, `web/x402-playground/`, `web/mpp-demo/`) use `localStorage` to remember the API base URL, sample payloads, and form values you typed. Nothing is sent off-device beyond what you explicitly submit through the UI.

## How to clear

Use your browser's standard "Clear site data" controls for `grantex.dev` and `docs.grantex.dev`. Clearing site data signs you out of the portal and resets the playgrounds to defaults.

## Contact

Cookie or tracking questions: `sanjeev@orchestrum.in or mishra.sanjeev@gmail.com`.

Ownership and IP: `sanjeev@orchestrum.in`, `mishra.sanjeev@gmail.com`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.