Taicho legal
Cookie and Telemetry Notice
Strictly necessary cookies, local preferences, and current telemetry behavior.
- Status
- Draft — legal approval required
- Effective date
- Effective date pending legal approval
Current cookie categories
| Category | Purpose | Typical duration | Consent |
|---|---|---|---|
| Authentication session | Sign-in, session security, and organization access | Session/configured expiry | Strictly necessary |
| OAuth state and PKCE | Prevent forged integration and identity callbacks | Short-lived / deleted after callback | Strictly necessary |
| Anonymous support subject | Keep one public support conversation scoped to a browser | Short-lived service session | Strictly necessary |
| Sidebar preference | Remember whether workspace navigation is open | Up to seven days | Functional preference |
No advertising or cross-site analytics cookies
The current application does not install advertising pixels or cross-site analytics cookies. No non-essential consent banner is shown because those technologies are not enabled.
Taicho measures product usage with a self-hosted Plausible Analytics instance that runs on the same infrastructure as the application, so usage data is not shared with an analytics vendor. It counts page views and referral sources in aggregate, sets no cookies, keeps no persistent identifiers, and receives no record identifiers or query strings from Taicho pages, so it operates without a consent banner.
If cookie-based analytics, advertising, or replay technology is proposed, it must remain disabled until the launch markets, legal basis, vendor, retention, and consent controls are approved and users can withdraw consent as easily as they give it.
Operational and AI telemetry
The service can send privacy-filtered operational telemetry to Datadog and redacted AI usage metadata to Langfuse when configured. Export filters reject prompts, messages, payloads, email addresses, raw errors, stack traces, URL queries, SQL text, credentials, and authorization data.
Telemetry configuration, retention, and provider contracts remain release-gated. Browser cookie controls do not disable server-side security and operational records needed to provide the service.
Browser controls
Blocking strictly necessary cookies may prevent login, OAuth connection, support continuity, or navigation preferences. Customers can clear cookies through browser settings and sign out to revoke the active session.
Contact
Legal notices: Legal contact pending legal approval. Privacy requests: Privacy contact pending legal approval.
Operator: Legal entity pending legal approval, Registered address pending legal approval.