Cookie Policy
How BrandMilo uses cookies and similar technologies.
- Effective date
- July 26, 2026
- Last updated
- July 26, 2026
- Version
0.1-draft- Canonical path
- /legal/cookies
Counsel gate: approved
Approved for the product configuration, providers, jurisdictions, pricing, data flows, and document version 0.1-draft recorded in the COUNSEL_GATE block. Effective date and last updated remain July 26, 2026. Material changes require setting the gate back to review required.
Overview
This Cookie Policy explains how Eazivon uses cookies and similar technologies on brandmilo.com and the BrandMilo application.
Categories
Strictly necessary
Used for authentication, session management, CSRF protection, load balancing, security, consent records, and core preferences. These cannot usually be disabled through the consent tool.
Functional
Used to remember optional preferences such as language, timezone, or interface choices.
Analytics
Used to understand aggregate usage. Enable only with required notice or consent. Analytics are off by default in the initial local launch.
Marketing
Not enabled until legal basis, consent controls, and vendor disclosures are implemented.
Cookie and similar-technology table
- brandmilo_cookie_consent_v1 (localStorage key brandmilo_cookie_consent_v1) Provider: BrandMilo / Eazivon; purpose: store cookie preference choice; category: Necessary / preference; duration: until cleared by the user or browser; status: live
- __Host-brandmilo_session Provider: BrandMilo / Eazivon; purpose: session authentication; category: Necessary; duration: 14 days rolling, with a 30-day absolute session maximum; Secure=true; HttpOnly=true; SameSite=Lax; Path=/; Domain attribute: Do not set; status: planned for authenticated sessions when auth ships (ECO-04)
- ph_*_posthog (PostHog project cookie) Provider: PostHog, Inc. PostHog Cloud; purpose: usage analytics; category: Analytics; duration: 365 days, created only after analytics consent; status: planned created only after analytics consent and provider wiring
Choices
Users manage non-essential cookies through the BrandMilo Cookie Preferences control in the site footer (first-party preference UI). CookieYes (CookieYes Limited) is the designated CMP vendor and may be enabled later; it is not required for the current preference controls. Analytics remain off until you opt in. PostHog does not capture events or session replay before consent and is not loaded until analytics is enabled. Withdrawal is available from the same preferences panel. Browser settings can also block cookies. Legal pages and OAuth callback routes are excluded from unnecessary analytics.