Cookie Policy
How cookies support security and product experience.
This policy explains the cookies and similar technologies Orkestra uses and how you can control non-essential ones.
Trust controls
Tenant ACME verified
RBAC
Active
Audit chain
Verified
AI budget
72% used
Data stores
Isolated
Draft — pending legal review. Version 2026-07-08 · last updated July 8, 2026. A working consent manager must be connected and the live cookie inventory confirmed before this policy is relied upon in production.
Cookie categories
Non-essential cookies are set only with consent where the law requires it.
1. What cookies are
Cookies and similar technologies (local storage, tokens) are small data stored by your browser. We use them to keep you signed in, secure your session, remember preferences and, with consent, understand usage.
2. Strictly necessary
Required for authentication, session security, tenant context, CSRF protection and reliable navigation. These cannot be switched off and do not require consent because the service cannot function without them.
3. Functional & preference
Remember choices such as language, region or interface preferences to improve your experience. These are optional and controllable.
4. Analytics & performance
Help us understand traffic and product usage so we can improve. In regions that require it (e.g. the EU/UK, Brazil), these are set only AFTER you consent via the cookie banner, and never before.
5. Advertising
We do not currently use advertising or cross-site tracking cookies. If that ever changes, this policy and the consent banner will be updated first.
6. Consent management
Where the law requires prior consent for non-essential cookies, a consent banner lets you accept, reject or customise categories before any such cookie is set, and lets you change your choice at any time. [Consent manager — to be connected before production marketing launch.]
7. Managing cookies in your browser
You can view, block or delete cookies through your browser settings. Blocking strictly-necessary cookies may break sign-in and core functionality.
8. Do Not Track & Global Privacy Control
Where required by law (for example under CCPA/CPRA), we honour recognised opt-out signals such as Global Privacy Control (GPC) as a valid request to opt out of non-essential tracking.
9. Changes & contact
We may update this policy as our cookie use or the consent tooling changes. Questions: privacy@direction10.com.