6. Public-space references

wpc_analytics_consent_v1 stores your choice, policy version, decision time and expiry locally for 180 days; it is not sent to Google. If browser storage is unavailable the choice lasts only for the current page. After acceptance, first-party _ga and _ga_D4X4CD4GSS cookies last up to 180 days with renewal on visits disabled. Use Cookie settings → Reject analytics to withdraw; this stops future collection, removes these cookies and reloads the page if needed. It does not erase previously collected data or affect earlier lawful processing. The required GA4 setup uses two-month user/event retention with reset on new activity disabled. Aggregated reports may be retained longer; that setting does not delete all reports. Contact us about earlier data. Old wpc_cookie_notice_v1 preferences are not analytics consent.

Opening the guest contribution form sets wpc_discussion, a first-party Secure-on-HTTPS, HttpOnly, SameSite=Strict cookie, lasting up to one year. It enables this browser to manage submissions; the database holds a keyed hash, not the raw cookie token. Shared browser users may manage the same posts. It is not set merely by reading an article. The login cookie wpc_session lasts up to 12 hours. Editorial sidebar preferences are separate from visitor tracking.

wpc_reader_theme_v1: first-party local storage for your explicitly selected light or dark mode and its expiry time (180 days, removed on the next visit after expiry). System mode removes this preference and follows your device. No data is sent to third parties.