01
1. What this notice covers
This notice explains browser storage and similar technologies used by the English Taiji Circle service. It should be read with the Privacy Notice and is limited to the deployed US pilot.
02
2. Strictly necessary storage
Necessary storage may be used to maintain a secure session, remember a language or privacy choice, prevent request forgery, rate-limit abuse and resume a user-requested workflow. These functions cannot be switched off through an analytics choice because the requested service would not operate securely without them.
Necessary items are limited to secure session and refresh facts, CSRF and nonce protection, language and privacy choices, abuse prevention, and user-requested workflow state. They expire according to the relevant session or security purpose and are not used for advertising.
03
3. Google sign-in
When you choose Google sign-in, Google Identity Services may use browser storage or account-selection features under Google's own terms and privacy notice. The Taiji Circle backend verifies the returned identity credential and nonce; it does not require Google advertising access or a Google refresh token.
Email sign-in remains disabled until a verified transactional sender and updated provider disclosure are activated.
04
4. Analytics choice
Non-essential analytics remains disabled in this release, including when a choice is unset. If analytics is introduced later, it will require a new disclosed provider, event schema, retention period, withdrawal control and accepted notice before any optional event is sent.
Necessary security and service-operation records are retained under the Privacy Notice and are not converted into advertising or cross-context behavioural profiles.
05
5. Changing your choice
You may withdraw or change an optional analytics choice through the Cookie Choices control. Withdrawal must prevent new optional events and must not require an account. Previously collected information is handled under the retention and deletion rules in the Privacy Notice.
Questions and privacy requests may be submitted through /en/privacy. This version is effective on 2026-08-23 when activated in the immutable legal-version register.
