Operational baseline. Controller-specific legal details must be completed before production.
The public MVP does not load analytics, advertising, social widgets or optional third-party tracking. A consent banner is therefore not displayed merely for appearance.
Payload administration uses strictly necessary authentication and security cookies for signed-in editors. These are not marketing cookies.
Any later optional technology requires a documented purpose, equal accept and reject choices before activation, granular management and an easily available withdrawal control.