Session and security
The live site uses the shogram_session and XSRF-TOKEN cookies for sessions and request security. Their settings are still under production review.
Privacy / Browser storage
Cookies and browser storage
See which browser storage Shogram uses, how optional analytics consent works, and how to change your privacy settings.
Policy status
Draft for review
Effective date
Not yet effective
Reading time
About 4 minutes
Draft policy — legal review is pending
Shogram displays a privacy settings banner. You can reject optional analytics, allow first-party aggregate analytics, or change your choice later. Your choice is saved in this browser. The exact production storage inventory and legal wording still need review.
At a glance
Browser storage Shogram uses
The policy remains a draft while the production inventory and legal details are reviewed.
Preferences
Local storage remembers your theme and privacy choices until you clear browser storage.
Optional technologies
First-party aggregate analytics runs only after analytics consent. Marketing cookies and scripts are not enabled.
Choice controls
Use Privacy settings on any page to accept, reject or change optional analytics consent. Your choice is saved in this browser.
Browser controls
You can manage storage in your browser
Open Privacy settings on this page to change or withdraw optional analytics consent. You may also clear cookies and local storage in your browser settings. Blocking storage needed for a session, form request or security check may stop sign-in or other core features from working.
Draft document details
- Version
- Draft 1
- Last updated
- 3 November 2026
- Scope
- Visitors and users of the Shogram website and browser-based Platform
- Review note
- Describes the privacy settings banner and first-party analytics consent controls. Production storage inventory and legal review remain pending.
Shogram / Legal
Cookie and Browser Storage Policy
Not yet effective · Support@shogram.com
Draft for review. Shogram currently displays a privacy settings banner and lets visitors reject optional analytics, allow first-party aggregate analytics, and change their choice later. The choice is saved in browser storage. The exact production storage inventory, legal basis, notice wording, operator details, and jurisdiction-specific requirements still need verification and qualified legal review before this Policy is approved.
In plain words
Necessary session and security storage supports sign-in, form requests, and core service functions. Shogram also uses browser storage to remember the selected theme and privacy choices. Optional first-party analytics is off until a visitor allows it. Marketing cookies and scripts are not currently enabled. You can reopen Privacy settings on any page to change or withdraw optional analytics consent.
1. What this Policy covers
Cookies are small values stored by a browser. Similar technologies include local storage and session storage. This Policy describes storage used by [CONFIRM LEGAL OPERATOR] on the Shogram website and browser-based Platform. Read it with the [Privacy Policy].
2. Technologies and categories
| Category | Purpose | Storage identified in the application | Retention |
|---|---|---|---|
| Necessary session and security | Maintain sessions, protect form requests, and support core functions | Laravel session cookie (shogram_session) and CSRF cookie (XSRF-TOKEN) |
Session and expiration settings depend on production configuration and require verification |
| Privacy choice | Remember whether optional analytics is allowed | Local storage key shogram-consent-v1; first-party cookie shogram_analytics_consent communicates the analytics choice to the server |
Local choice remains until cleared or changed; the consent cookie is session scoped |
| Interface preference | Remember the selected light or dark theme | Local storage key shogram-theme |
Until cleared or changed |
| Analytics and performance | Count approved page views, broad traffic sources, selected CTA actions, and FAQ search outcomes | First-party aggregate counters are collected only after analytics consent. The collector does not store IP addresses, product codes, account IDs, full URLs, or raw search text | Browser choice remains until cleared or changed; aggregate records are retained for up to 13 months |
| Advertising and targeting | Not currently used | No marketing cookies or scripts are currently enabled | Not applicable |
This inventory describes application behavior. Hosting, browser, embedded-service, and production configuration should be checked before the Policy is approved.
3. Your choices
The privacy settings banner offers Reject optional, Preferences, and Accept analytics. In Preferences, necessary storage is always active and analytics can be enabled or disabled. No marketing cookies or scripts are enabled. Your choice is saved in this browser and the analytics choice is sent to the server through a first-party cookie. Analytics collection starts only after analytics consent.
Use the persistent Privacy settings control on any page to change or withdraw your optional analytics choice. Clearing browser storage removes the saved choice, and Shogram will ask again. Blocking necessary session or security storage may prevent sign-in, form submission, or other core functions.
4. Consent controls
The banner and preference controls are implemented. They store the selected categories, choice time, and consent-copy version in the browser. No account identifier is attached to that browser record. Analytics consent is also represented by the first-party shogram_analytics_consent cookie so the server can enforce the choice. The collection endpoint accepts analytics events only when consent is present.
The design, legal basis, wording, retention, and consent requirements must be reviewed for [COUNTRY/LAW] before this draft is approved.
5. Third-party technologies
The application inventory identifies first-party analytics only. Review hosting, embedded content, support, payment, and other third-party services in production before approval. Do not add a third-party technology without reviewing its behavior, provider terms, data transfers, and consent requirements.
6. Changes and contact
We may update this Policy when browser technologies or applicable requirements change. The final approved version and effective date must be published after review.
Operator: [LEGAL OPERATOR TO CONFIRM]
Address: [ADDRESS TO CONFIRM]
Support: Support@shogram.com
Privacy contact: [PRIVACY CONTACT TO CONFIRM]
How to complain
To ask about browser storage or withdraw an optional analytics choice, use Privacy settings on any page or contact Support@shogram.com. The competent regulator and any formal privacy contact must be confirmed for [COUNTRY/LAW] before approval.
Change log
| Version | Date | Summary |
|---|---|---|
| Draft 1 | 3 November 2026 | Corrected the description of the implemented privacy settings banner and browser-saved consent choices; legal review and production verification remain pending. |
More information
Read about privacy and your account
The Privacy Policy draft covers information handling more broadly. Visit the Help Centre for related answers and guides.