Legal / cookies

The public site does not set non-essential cookies in Phase 2A.

Only the internal admin system uses strictly necessary session and CSRF cookies. Public visitor tracking, advertising cookies, and marketing pixels are outside the current release.

CookiePurposeScope

wpfauna_sessionInternal admin login session.Strictly necessary, httpOnly, secure in production.

wpfauna_csrfProtects mutating admin requests against CSRF.Strictly necessary, secure in production.

Public analytics or marketing cookiesNot used in Phase 2A.Not set.