Cookie & Consent Policy
This policy describes how the sevenlayers main application uses cookies and similar storage technologies, and how you can grant, refuse, or withdraw optional consent at any time.
Last Updated: March 27, 2026 | Policy Version: 2026-03-27
1. What this policy covers
We use a minimal storage approach in the main application. Essential storage supports login, security, and legal consent documentation. Optional analytics remains deactivated unless and until you provide explicit consent.
2. Storage technologies used in this app
| Name | Type | Purpose | Legal Basis | Duration |
|---|---|---|---|---|
| cookie_consent (localStorage) | Essential / Consent record | Stores your explicit consent decision (accept/decline), policy version, and timestamp. | Art. 6(1)(c), Art. 6(1)(f), and where applicable Art. 7 GDPR documentation duties | Until changed by user or cleared locally |
| vc83_cookie_banner_dismissed (localStorage) | Functional | Stores that you dismissed the banner before making a full decision, so the banner is non-intrusive. | Art. 6(1)(f) GDPR (usability and proportional presentation) | Until decision is made or local storage is cleared |
| Authentication/session cookies | Essential | Maintain authenticated sessions and protect requests against unauthorized use. | Art. 6(1)(b) GDPR (service contract) and Art. 6(1)(f) GDPR (security) | Session-bound or provider-defined |
| Optional analytics storage | Optional (consent only) | Currently disabled by default. May be activated only after explicit opt-in and documented policy update. | Art. 6(1)(a) GDPR (consent) | Only while optional analytics is enabled and for the documented retention window |
3. Essential versus optional storage
Essential storage: required for core app operation, security controls, and legally required consent evidence.
Optional analytics: processed only after explicit opt-in; decline keeps optional analytics disabled.
4. Giving, refusing, and withdrawing consent
- Give consent: use the cookie notice or settings controls to accept optional analytics.
- Refuse consent: choose decline; only essential storage remains active.
- Withdraw or change later: open the persistent `Legal & Cookies` floating control at any time; changing consent is as easy as granting it.
5. Browser controls and local deletion
You can clear cookies/local storage in your browser at any time. Deleting storage may require renewed login and renewed consent selection.
6. Third-country transfers
Optional analytics is currently fail-closed by default. The current optional analytics processor is PostHog and is only used after explicit opt-in. If optional processing introduces transfers outside the EU/EEA, we disclose the transfer path and safeguards (for example EU Standard Contractual Clauses) before activation.
Processor coverage is reviewed continuously. Material processor-list updates are published in this policy and in the Privacy Policy before rollout.
7. Policy changes
Material policy updates are versioned. If required, we request a fresh consent decision for the updated version.
8. Controller and contact
Questions about cookies or consent controls can be sent to support@sevenlayers.io
Vound Brand UG (haftungsbeschränkt)
Am Markt 11
17309 Pasewalk
Germany
Managing Director: Remington Splettstoesser
Register Court: Amtsgericht Neubrandenburg, HRB 7565
VAT ID: DE293728593
Email: support@sevenlayers.io