Cookie policy
Draft for product and legal review. Updated 12 October 2026.
Regulation Check is operated by Saurabh Shubham. Boddinstraße 13, 12053 Berlin, Germany. Privacy contact: outreach@regulationcheck.com.
Optional features start off. Your choice applies to this browser on this hostname, for 180 days (the main site and tracker keep separate choices). Declining keeps core access available. Change or withdraw your choices at any time. Withdrawing saved content clears only our tracker preferences on the next page running our scripts; it does not reset your chosen color theme, sign you out or delete workspace records or drafts.
| Name | Purpose / category | Expiry |
|---|---|---|
| regcheck_session | Sign-in session / essential, HttpOnly | 12 hours; session renewal may refresh it |
| regcheck_privacy | Version, expiry and category choices / essential | 180 days from your last choice |
| regcheck_privacy_csrf | Protect privacy-choice forms / essential, HttpOnly | 30 minutes, refreshed on HTML navigation |
| aw_isDark | Explicit color theme choice / essential preference, localStorage. Uses your device theme until you choose. | Until another theme choice, browser clearing or manual removal |
| aw_activeFilters, aw_activeRegion, aw_showAllCountries, aw_selectedCountryId | Tracker preferences / optional saved content, localStorage | Until withdrawal, preference expiry, browser clearing or manual removal |
Optional media: not currently used. No optional media vendor or analytics SDK is configured by this feature. The tracker requests functional country flags and map tiles from flagcdn.com and cartocdn.com; those servers receive your network request. These are distinct from optional media embeds.
Visitor statistics: only after opt-in, the server records the UTC day and route pattern (for example, a page type with a parameter name). It excludes query strings, form contents, raw access tokens, IP addresses, location, user-agent and account identity. No analytics cookie or device identifier is created. Consented statistics do not count everyone. New records expire after 90 days and are removed on the next HTML request.
Historic visit records from before these controls are preserved pending an owner retention decision; this choice does not erase them. Page visit privacy notice explains this history. The deployed configuration enables Caddy access logs (excluding public /p/ share paths). These logs may include request paths, connection addresses and browser headers. Web-server access logging is disabled, but application errors and operational logs remain. Docker rotates web, scheduler and Caddy logs at 10 MB per file, keeping three files; this is a size limit rather than a time-based retention guarantee. These infrastructure logs are separate from optional statistics and these choices do not disable them.
Access-request contact permission, AI assistance, marketing and evidence sharing are separate decisions. Requested workspace records are stored on the server rather than as optional browser preferences.