Last updated: August 3, 2026 Effective date: August 3, 2026 Version: 1.0
Contents
- 1. What this policy covers
- 2. What cookies are
- 3. Cookies we use
- 4. Your choices
- 5. Legal basis
- 6. Cookies set inside connected services
- 7. Changes to this policy
- 8. Contact
1. What this policy covers
This Cookie Policy explains how Start and Power LLC (“we,” “us”) uses cookies and similar technologies on https://docil.ai and within the Docil.ai application.
It supplements our Privacy Policy, which explains how we handle personal data more broadly. Where this policy uses terms such as “personal data,” “controller,” or “consent,” they carry the meaning given in the Privacy Policy.
The short version: we use a small number of cookies to keep you logged in and the Service secure, plus optional analytics cookies that only run if you agree. We use no advertising cookies, no tracking pixels, and no cross-site behavioral advertising technology of any kind.
2. What cookies are
A cookie is a small text file that a website stores on your device. It lets the site recognize your browser between page loads and across visits.
We also use technologies that behave similarly and are covered by this policy:
- Local storage and session storage: browser storage used to hold interface state, such as which panel you had open.
- Pixels and web beacons: we do not use these.
- Device fingerprinting: we do not use this.
First-party vs third-party. First-party cookies are set by docil.ai itself. Third-party cookies are set by another domain. Our only third-party cookies are analytics cookies, and only if you consent.
3. Cookies we use
3.1 Strictly necessary
These are required for the Service to work. Without them you cannot log in or stay authenticated. They do not require consent, because they are essential to a service you have expressly requested.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
docil_session | docil.ai | Maintains your authenticated session | First-party, HTTP | Session, or [30] days if you select “keep me signed in” |
docil_csrf | docil.ai | Protects against cross-site request forgery attacks | First-party, HTTP | Session |
docil_consent | docil.ai | Records your cookie choices, so we do not ask again on every visit | First-party, HTTP | 12 months |
__cf_bm or equivalent | [CDN / infrastructure provider] | Distinguishes humans from bots, protects against abuse | Third-party, HTTP | 30 minutes |
3.2 Preferences
These remember your interface choices. They are optional and run only with your consent.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
docil_prefs | docil.ai | Stores language, theme, time zone, and layout preferences | First-party | [12] months |
3.3 Analytics
These help us understand how the Service is used so we can improve it. They are optional and run only with your consent. We use aggregate data only; we do not use analytics to build individual profiles.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
[_ga] | [ANALYTICS PROVIDER] | Distinguishes visitors for aggregate usage statistics | [Third-party] | [24] months |
[_ga_<ID>] | [ANALYTICS PROVIDER] | Maintains session state for analytics measurement | [Third-party] | [24] months |
To be completed before publication. The table above must list the exact cookies your chosen analytics provider sets. If you use a cookieless analytics tool such as Plausible or Fathom, replace this section with a statement that no analytics cookies are set and that measurement is performed without storing identifiers on the device.
3.4 Advertising
None. We set no advertising cookies and share no data with advertising networks, data brokers, or ad exchanges. This applies to the Google APIs we use as well: information received through them is never used or transferred for advertising purposes, as stated in our Privacy Policy.
4. Your choices
4.1 The consent banner
On your first visit from the EEA, United Kingdom, or Switzerland, a banner appears offering three options:
- Accept all — enables preference and analytics cookies.
- Reject all — keeps only strictly necessary cookies. This is presented as prominently as accepting, and requires no more clicks.
- Customize — lets you enable or disable each category individually.
Non-essential cookies are not set until you make a choice. If you dismiss the banner without choosing, nothing beyond strictly necessary cookies is stored.
4.2 Changing your mind
You can change or withdraw your consent at any time:
- Click “Cookie settings” in the footer of any page.
- Withdrawal is as easy as giving consent, and takes effect immediately.
- Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
4.3 How long consent lasts
We store your choice for 12 months, after which we will ask again. We also ask again if we add a new cookie category or a new analytics provider.
4.4 Global Privacy Control
If your browser or extension sends a Global Privacy Control (GPC) signal, we treat it as a valid instruction to reject all non-essential cookies, and the banner reflects that choice automatically.
We do not respond to “Do Not Track” headers, because no consistent standard exists for how they should be interpreted.
4.5 Browser controls
You can also block or delete cookies through your browser. Note that blocking strictly necessary cookies will prevent you from logging in.
- Chrome: Settings → Privacy and security → Third-party cookies
- Safari: Settings → Privacy
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
5. Legal basis
| Category | Legal basis |
|---|---|
| Strictly necessary | Necessary for a service you requested. No consent required (ePrivacy Directive Art. 5(3) exemption; GDPR Art. 6(1)(b) and 6(1)(f)) |
| Preferences | Consent (GDPR Art. 6(1)(a)) |
| Analytics | Consent (GDPR Art. 6(1)(a)) |
For U.S. residents. We do not sell or share personal information through cookies within the meaning of the CCPA/CPRA or other state privacy laws. Because we use no advertising or cross-context behavioral advertising technology, there is no opt-out of sale or sharing to offer. We nonetheless honor the GPC signal as described above.
6. Cookies set inside connected services
When you connect a third-party source such as Google, Stripe, Slack, or Salesforce, the authorization step takes place on that provider’s own domain, under their control. They may set their own cookies during that process, governed by their own policies, not by ours.
We have no control over those cookies and cannot enable or disable them on your behalf. Their handling of your data is covered by the contracts you hold with each provider, as explained in Section 7 of the Privacy Policy.
7. Changes to this policy
We may update this Cookie Policy to reflect changes in the cookies we use or in applicable law.
If we add a new category of non-essential cookies or change analytics providers, we will ask for your consent again before the new cookies are set. The current version is always published at https://docil.ai/cookies with its last-updated date.
8. Contact
Questions about this policy, or about how we use cookies:
Start and Power LLC 1621 Central Ave, Cheyenne, WY 82001, United States
Privacy: privacy@docil.ai General: hello@startandpower.com
EU Representative (GDPR Art. 27): [NAME, ADDRESS, AND EMAIL]
You may also lodge a complaint with your national supervisory authority, as described in Annex B of the Privacy Policy.
Draft document. Review by U.S. and EU legal counsel is required before publication.