Essential-first cookies for an EU product.

AppealLayer should use only cookies or browser storage that are strictly necessary for authentication, security, session continuity, CSRF protection, rate limiting, and user-requested functionality.

Non-essential analytics, advertising, retargeting, session replay, or marketing cookies should remain disabled unless the user has been given clear information and a real choice to accept or refuse them.

• strictly necessary cookies: required to operate login, security, fraud prevention, API/dashboard sessions, or user-requested settings
• preference cookies: only used where needed to remember choices, such as cookie preferences or accessibility settings
• analytics cookies: disabled by default until an EU-compliant consent banner and preference center are implemented
• marketing cookies: not part of the MVP and should not be used without explicit prior consent

You can remove or block cookies through your browser settings. Some essential functionality may not work if strictly necessary cookies are blocked.

Cookie/privacy questions: privacy@appeallayer.com.