1. What cookies are

Cookies are small text files stored on a device when a website is visited. Similar technologies can include session storage, local storage, pixels, tags, scripts, or other methods used to store information on a device or access information from a device.

2. How we use cookies

We use cookies and similar technologies where necessary to operate the site, maintain security, protect forms, support account sessions, preserve payment continuity, restore short-lived interface state, and remember cookie choices. Where consent is required for a non-essential purpose, the technology will not be used unless you choose to enable it.

3. Cookie categories

Strictly necessary cookies and similar technologies. These are required for essential site functions such as session management, security, CSRF protection, form handling, payment continuity, remembering cookie choices, or short-lived interface continuity. These do not require consent where the law treats them as strictly necessary or otherwise exempt.

Preference or interface technologies. These may be used to remember site settings, your choices, or temporary interface state. Where any are not strictly necessary or otherwise exempt, they will be activated only with the appropriate consent.

Analytics cookies. These may be used to understand how visitors use the site, which pages are viewed, and where performance problems occur. Analytics cookies will not be activated before consent.

Marketing cookies. We will not use marketing cookies unless there is a clear business need, a compliant consent mechanism, and an accurate public disclosure of the technologies involved.

4. Cookies currently used

Cookie or technology	Purpose	Category	Typical duration or control
`client_sessionid`	Maintains a signed-in client session and supports the 20-minute inactivity timeout.	Strictly necessary	Server-controlled session. The authenticated session expires after inactivity, sign-out, or normal session expiry.
`client_csrftoken`	Protects forms and authenticated requests against cross-site request forgery.	Strictly necessary	May persist for up to one year unless removed earlier by browser settings or site changes.
`scirdom_cookie_preferences`	Remembers whether you chose essential-only cookies or accepted optional cookies.	Strictly necessary preference record	Up to 180 days, unless you change your choice or delete browser cookies.
`scirdom.scroll_restore` session storage	Temporarily restores scroll position after form submissions or same-page actions so the interface returns to the relevant place.	Short-lived interface continuity	Same browser tab only; normally cleared immediately after use and ignored after five minutes.
Cloudflare security and Turnstile technologies	Helps protect sign-up, sign-in, password-reset, and support forms from abuse and automated attacks.	Strictly necessary security	Controlled by Cloudflare and used only where Cloudflare security, CDN, challenge, Turnstile, rate-limit, or access controls apply.
Stripe and PayPal payment technologies	Supports secure payment processing when you choose to pay for a ScirDom Draw through those providers.	Payment-service cookies controlled by the payment provider	Controlled by Stripe or PayPal and used when their payment services, fraud checks, checkout surfaces, wallets, or account-login flows are loaded or used.

ScirDom does not currently enable optional analytics or marketing cookies by default. If analytics, marketing, advertising measurement, or similar non-essential technologies are introduced, this policy and the consent mechanism will be updated before they are used where consent is required.

A current choice to accept optional cookies is not treated as advance consent for materially different optional technologies introduced later. If the optional technology set changes materially, ScirDom will update the notice and ask for a fresh choice where required.

5. Managing cookie preferences

Where non-essential cookies are used, you can accept, reject, or later change your preferences through a clear consent mechanism. Browser settings may also allow you to block or delete cookies, although doing so may affect site functionality.

Essential cookies are explained clearly. Non-essential cookies are switched off unless you actively choose to enable them, and you can change your choice at any time.

Change your cookie choice

Current recorded choice: no recorded choice.

6. Third-party services

ScirDom uses Cloudflare for security, CDN, Turnstile protection, challenge handling, rate limiting, and protected admin access; Stripe for card and wallet payment processing; PayPal for direct PayPal checkout where available; and email-delivery services for transactional messages. These providers may set their own cookies or use similar technologies when their services are loaded or used.

Stripe and PayPal payment pages, wallets, fraud checks, and account-login flows are controlled by those providers. Their own cookie and privacy notices explain the cookies they set on their domains. Cloudflare's documentation explains its security cookies and challenge-platform technologies.

ScirDom does not use cookies for behavioural advertising and does not use browser fingerprinting for marketing. Security, fraud-prevention, and payment providers may assess browser, device, or network signals where needed to protect the service, prevent abuse, or process payments.

If additional third-party services are introduced, this policy will be updated to reflect the implementation.

7. Changes to this policy

This policy will be updated whenever we introduce new cookies, remove cookies, change the legal basis for their use, or alter the consent flow.

Cookie Policy

Essential cookies

Analytics or marketing

Changing preferences