Legal

Cookie policy

Draft for review

This document is a working draft prepared for Crownline Express. It must be reviewed and approved by a qualified legal adviser for the jurisdictions where Crownline operates before it is relied on.

Last updated 27 October 2026

Public website

The public website sets two strictly necessary cookies so the pages you asked for stay consistent: theme (light or dark) and lang (the language you chose). They last one year, are not used for analytics or advertising, and are not sent to any other site. The public website does not use analytics, advertising or social-media tracking.

Staff console

The staff console at /admin uses strictly necessary cookies:

Session cookie: keeps a signed-in staff member authenticated. HttpOnly, SameSite=Strict, expires after inactivity or at most 12 hours.
Sign-in protection cookie: protects the sign-in form against cross-site request forgery. Expires after 1 hour.

Changes

If we add any non-essential cookies in future, we will update this policy and ask for consent where required.