RevivedLocal cookie policy

Your choices

Optional services stay off until you explicitly allow them. Accept all enables eligible services, Reject all keeps them off, and Customize lets you choose individual services. Closing the controls or continuing to browse does not give consent.

You can reopen Cookie settings at any time and reject previously allowed services. Withdrawal stops future use through these controls and removes accessible storage listed for removal below. It cannot retract information already transmitted or erase records held by a provider.

Global Privacy Control keeps services classified here as sale/sharing, and their dependent services, off. Accept all cannot override an active signal. Removing the signal does not restore revoked choices.

Necessary storage and requests

The first-party rl_consent cookie stores a random consent ID, service choices, scopes and timestamps on this host at /. It is available to the consent code, uses SameSite=Lax and uses Secure over HTTPS. Grants expire after 180 days; saved choices are retained for up to 180 days from your last choice. A changed processing scope can require another choice.

If your browser prevents storage, choices apply in the current page but may not be remembered on another page or visit. The controls display a warning when saving fails.

/: Deliver requested pages and first-party images, scripts, styles and user-initiated audio.

/consent-log: Record cookie choices independently of optional analytics.

/api/: Process explicitly requested purchases and purchase support; no analytics on purchase confirmations or reports.

Existing site preferences

This pilot no longer reads or writes the old rlPurchasedDomain, rlSeenReport, rlAsNew or rl-spin convenience flags. Existing values are left untouched. Purchase eligibility is checked by the server. Only the necessary cookie-choice record is written by these controls.

Google Analytics 4

Category: analytics. Purpose: Measure visits to public marketing pages after explicit permission. Reports, template previews, purchase confirmations and error pages are excluded..

Provider integration: Google Analytics 4. Classified as sale/sharing for these controls; restricted by Global Privacy Control.

Required services: none. All required services must also be allowed.

Declared request destinations: https://www.googletagmanager.com, https://www.google-analytics.com, https://region1.google-analytics.com.

_ga (cookie): Google browser/session identifiers, including legacy cookies. Scope: this host/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_WLNLQ45G2Q (cookie): Google browser/session identifiers, including legacy cookies. Scope: this host/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga (cookie): Google browser/session identifiers, including legacy cookies. Scope: revivedlocal.com/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_WLNLQ45G2Q (cookie): Google browser/session identifiers, including legacy cookies. Scope: revivedlocal.com/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

Consent records

Choices are sent to the same-origin /consent-log endpoint. Records contain site and random consent IDs, an event ID, submitted and effective choices, Global Privacy Control state, client/server timestamps and the policy/configuration/package versions. Cookie-choice records do not include a visitor name, email, full page URL, query string, raw IP address or browser fingerprint.

Configured record-processing providers: Railway, Cloudflare, Supabase. Hosting and network providers may process connection metadata; their logs and retention require separate review.

Consent events are retained for 730 days according to the configured deletion schedule. Referenced policy snapshots remain available for retained records. Database backups are kept for 7 days, so a deleted record can remain in a backup for up to 7 more days.

Your choices take effect even if record delivery fails. A bounded in-memory queue retries delivery; pending events can be lost when a page closes or the browser stops. Local choices are not proof that an audit record was delivered.

Contact and changes

Contact RevivedLocal at info@revivedlocal.com about cookie choices or retained consent records. A consent ID alone is not authorization to obtain records; requests require a separate identity/access review.

This policy and service inventory are versioned. Processing changes are reviewed before deployment; the banner may ask again when an existing grant no longer matches a service's scope.