Cookie Policy

The authenticated application uses a first-party session cookie to maintain login state, active organization, CSRF protection, MFA or recovery flow state, and security controls. It is configured with HttpOnly, SameSite=Lax, and Secure in production. Blocking it prevents sign-in and protected forms from working.

• asuruas_cookie_choice: stored in local storage and a first-party preference cookie to remember whether the visitor selected Necessary only or Allow analytics.
• asuruas-checklist:<page>: optionally remembers progress in public educational checklists on that browser.
• Local storage remains on the device until cleared by the user, the browser, or the site code. It is not transmitted to Asuruas unless a feature explicitly submits it.

Public registration and other protected forms may use Cloudflare Turnstile. Cloudflare receives browser, IP, request, and security signals and may use necessary cookies or similar technologies to determine whether a request is likely legitimate. Turnstile is used for security, not advertising.

Stripe-hosted checkout and the billing portal use Stripe's cookies and technologies under Stripe's own notices. Those pages are separate from Asuruas and are used for payment, fraud prevention, tax, and subscription administration.

Google Analytics 4 (measurement ID G-66RYKGCE16) and Google Tag Manager (container GTM-TTBDPM9J) are optional analytics technologies. They are not loaded until a visitor selects Allow analytics. When enabled, Google may receive page and referrer information, browser and device characteristics, analytics identifiers, and network information used to provide analytics. Advertising storage, advertising user data, and advertising personalization remain denied by Asuruas by default. Third-party advertising and session replay remain disabled. Analytics disclosure added August 11, 2026.

Use the Privacy choices link in the site footer to change between Necessary only and Allow analytics. You may also clear cookies and local storage in browser settings. Necessary session storage cannot be disabled when it is required for authentication, security, or a requested service function. Changing from analytics to necessary takes effect on the next page load.

Questions may be sent to clancaster@lancastersolutionsllc.com. Effective August 9, 2026.