[LEGAL REVIEW REQUIRED BEFORE LIVE LAUNCH] — Version 2026.10-DRAFT-v1 · Aligned with Swiss FDPIC guidelines on cookies and similar technologies (verified 19 October 2026). Necessary-only by default.

Cookie Policy & Storage Inventory (FDPIC Guidelines)

1. Data-Minimalist Default (Necessary-Only)

By default, Vaango Vaanga sets only strictly necessary first-party storage required for session security (vv_session), CSRF protection (vv_csrf), language selection (vv_locale), consent recording (vv_consent), and your local order basket. Rejecting optional cookies never blocks ordering.

2. First-Party Cookie Inventory

• vv_session (HttpOnly, SameSite=Lax): Authenticated session token. • vv_csrf (SameSite=Lax): Anti-CSRF verification token. • vv_locale (SameSite=Lax): Remembers EN/DE/FR/TA interface language. • vv_consent (SameSite=Lax): Stores your versioned cookie consent choice.