Technical audit of cookies and trackers actually present on inkos.me
Categories shown in the banner: 1. Strictly necessary (always on) — authentication session (httpOnly cookie), cookie consent (localStorage 'inkos_cookie_consent_v2'), language state, minimal UI preferences. Legal basis: Art. 5(3) ePrivacy — no consent required. 2. Analytics (opt-in) — PostHog Inc. Loads ONLY after "Analytics" is accepted. Captures anonymous usage events. Retention: PostHog default. Transfer: US (SCCs). 3. Marketing (opt-in) — currently no marketing pixel is injected by INKOS. We reserve the category for future pixels (Meta, Google Ads) and consent will be honoured.
You can manage preferences anytime by reopening the panel via "Cookie Preferences" in the footer. Your choice is audit-logged (POST /api/consent/log) with timestamp, policy version and accepted categories — no additional personal data is sent.
Pages with the embedded widget (Studio's mini-site) may, on the Studio's own site, fire third-party tracking configured by that Studio (Meta, Google Ads via GTM). INKOS emits the standard postMessage("inkos_booking_completed") event — the Studio is responsible for any tracking setup on its own site.