Legal · Draft
Cookie Policy
This draft explains cookies and similar browser storage used by the MelonPixels site. It is for counsel review, not legal advice, and is not yet effective.
Publication status: Draft for counsel review; not legal advice; not yet effective. Last updated .
Current site behavior: MelonPixels does not collect payment, schedule appointments, or run a post-checkout onboarding flow on this site. Project discussions start through the contact form; legacy links redirect there and retired APIs do not create records.
1. Scope and current status
“Cookies” includes small files and comparable technologies placed in a browser or device. This policy covers the public marketing site, forms, and any administrative session that uses the same domain. The effective version will list each live cookie or storage key, provider, purpose, duration, and whether it is first- or third-party.
In the current code, the public site uses a fixed dark theme and does not store a theme preference. The admin area uses a signed session cookie when configured. No analytics or advertising tag is represented as active by this draft. A local or preview run may use development storage and is not a production consent record.
2. Categories and examples
- Strictly necessary: security, session, routing, load protection, or an authenticated admin session. These cannot be switched off where the requested function cannot work without them.
- Preferences and functionality: a user preference such as language or display settings, if one is added in a future release. The current public site has no preference storage; counsel should confirm the classification and disclosure of any later setting.
- Analytics and performance: measurement of page visits, referrers, events, and site performance. No analytics provider is active in this repository. If enabled, the provider, fields, retention, and lawful basis must be disclosed and non-essential collection held until any required consent is obtained.
- Advertising and attribution: campaign measurement or advertising tags such as Meta Pixel or LinkedIn Insight. These are future possibilities only, not configured processors or a promise that they will be deployed. They require an approved consent and withdrawal experience where required.
- Third-party services: no payment checkout or calendar booking provider is active on this site. If a future approved service sets cookies, the final inventory must link to that provider's notice and explain whether the provider acts independently or under MelonPixels' instructions.
3. Purpose and consent
Necessary technologies are used to deliver a function a visitor requests, protect the site, or maintain a secure session. Optional measurement, advertising, or preference technologies should be used only on the lawful basis confirmed for the particular activity. Where consent is required, it should be freely given, specific, informed, recorded, as easy to withdraw as to give, and separate from acceptance of the commercial terms.
A consent banner or preference centre is not implemented by this draft. Before publishing an effective policy, the operator must decide which non-essential technologies will run, keep them off until a valid choice is recorded, make “reject” as clear as “accept”, and provide a persistent withdrawal path. A browser setting alone may not provide the required choice experience.
4. Managing cookies and storage
You can clear or block cookies through browser controls. Blocking a necessary cookie can sign you out of the admin area or prevent a security function from working. Browser controls do not necessarily erase records already held by MelonPixels or a provider; use the Privacy Policy contact route for those requests.
5. Providers, transfers, and retention
The production site may use a hosting/CDN, email, analytics, or advertising provider only after the operator configures and reviews it. No payment or calendar provider is active on this site. If a provider processes information outside the Philippines, the final notice must state the destination and safeguards or other transfer terms approved by counsel.
Cookie lifetimes, consent logs, and provider-side records should be kept only for the approved purpose or legal/accounting period. Exact durations and deletion/withdrawal behavior remain to be confirmed; no retention period is promised by this draft.
6. Related privacy information
See the Privacy Policy for the controller, contact email, categories of personal information, lawful-processing analysis, data-subject requests, security, and complaints. See the Terms and Conditions and Service Agreement for the commercial service context.
7. Open decisions before publication
- Confirm the complete cookie/local-storage inventory from the deployed host and every enabled integration.
- Decide whether analytics, advertising, personalization, and hosted checkout technologies are used and on what basis.
- Implement and test a consent/preference tool, withdrawal path, consent log, and “reject” behavior where required.
- Document provider notices, international transfers, retention periods, and deletion signals.
- Align this policy with the final Privacy Policy and the actual production domain before collecting optional telemetry.
Related documents
Reference sources
These working notes draw on the sources below. They are included for review and do not represent a legal opinion, registration, certification, or approval of this draft.
Questions about this draft or a request to update information can be sent to jeromeley@melonpixels.com. Please do not send payment-card numbers, passwords, government IDs, or other sensitive credentials through this email or the public forms.