1. What is a cookie / browser-storage item?
A cookie is a small text file a website asks your browser to save and send back on later visits.
localStorage and sessionStorage are similar but stay only in your browser and are never sent to any server unless our JavaScript explicitly uploads them. Under GDPR, UK GDPR, ePrivacy Directive 2002/58/EC, PECR (UK), CCPA/CPRA (California), PIPEDA (Canada), Quebec Law 25, Nepal Individual Privacy Act 2075 and the Brazilian LGPD, all of these technologies are treated equivalently as “information stored on the user's terminal equipment”.2. Categories we use (and do not use)
EU ePrivacy and UK PECR recognise four categories. Sachaltech uses only category (a).
- (a) Strictly necessary — required for the site to function or to fulfil a service you actively request. We use these. No consent required under any jurisdiction.
- (b) Functional / preference — remember choices like language or theme. We use one (the dark/light theme), and you can clear it any time from your browser.
- (c) Performance / analytics — measure how visitors use the site. We do not use any.
- (d) Targeting / advertising — track you across sites for ads. We never use any.
3. Complete list of storage keys we set
| Key | Where | Purpose | Retention |
|---|---|---|---|
| sachaltech-theme | localStorage | Remember dark/light preference. | Until you clear browser data. |
| sachaltech.roi.scenarios | localStorage | Save investor ROI scenarios on /proposal. Stays in your browser; never uploaded. | Until you delete via the UI or clear browser data. |
| sachaltech.matcher.* | localStorage | Remember Investor Deal Matcher inputs across page reloads. | Until you clear browser data. |
| __session (if signed-in admin) | httpOnly cookie | Authentication for internal admin tools. Not set for public visitors. | Session, max 7 days. |
We do not set any third-party cookies. We do not embed Google Fonts loaders, Google Tag Manager, Meta Pixel, X / Twitter conversion, LinkedIn Insight, TikTok Pixel, Hotjar, FullStory, Mixpanel, Segment, Intercom, Drift, Crisp, HubSpot tracking or any advertising network.
4. Lawful basis by jurisdiction
- EU GDPR (Reg. 2016/679) + ePrivacy 2002/58/EC art. 5(3): strictly necessary exemption — no consent required.
- UK GDPR + PECR reg. 6(4): strictly necessary exemption.
- Quebec Law 25 (s. 8.1): only necessary technical cookies; no profiling cookies are activated.
- CCPA / CPRA: we do not “sell” or “share” personal information; no Global Privacy Control signal handling required because we do no cross-context behavioural advertising.
- PIPEDA (Canada): implied consent for strictly-necessary first-party storage.
- Nepal Individual Privacy Act 2075 + Electronic Transactions Act 2063: data is collected, stored and used only for the purpose disclosed here.
- Brazil LGPD, India DPDP Act 2023, Australia Privacy Act 1988, Singapore PDPA, South Africa POPIA: equivalent functional-necessity bases apply; no sensitive personal data is collected via cookies.
5. Your control
You can block or delete any of these at any time using your browser settings (Chrome, Firefox, Safari, Edge, Brave, Arc all expose this under Privacy & Security). The site will continue to work — you will just lose your saved theme, ROI scenarios and matcher inputs. To stop us emailing you, visit /unsubscribe.
6. Changes & contact
If we ever introduce a non-essential cookie we will publish a consent banner before it is set, update this page and require opt-in for EEA/UK/Quebec visitors. Questions: privacy@sachaltech.com.