Privacy Notice (P0)

The client creates a pseudonymous identifier cookie: sa_uid.

It binds progress, unlock attempts, and compliance requests.

Essential: sa_uid, sa_consent.

Optional categories: analytics, marketing. Default state: off.

Consent events may be stored for audit: /api/compliance/consent.

DSAR requests are recorded with status and due date: /api/compliance/dsar (target: 30 days).

Security and audit logs may be retained for integrity and abuse response.

Update consent at /en/cookies.

Create DSAR requests at /en/dsar.

Submit corrections at /en/corrections.