This Notice describes cookies, browser storage, anti-abuse technology, analytics and similar technologies identified in the current LeStudio application.
1. Application and Definitions
1.1 Application
This Notice applies to LeStudio websites and Services that refer or link to it.
1.2 Cookies
A “cookie” is a small data item stored or transmitted by a browser in connection with a website or online service.
1.3 Similar Technologies
“Similar Technologies” includes local browser storage, security challenges, analytics identifiers and comparable browser or device mechanisms.
1.4 Current-Implementation Basis
This Notice is based on technologies identified in the current LeStudio implementation. It is not intended to list generic advertising technology that LeStudio does not currently use.
2. Authentication Cookie
2.1 le_session
LeStudio currently uses the le_session cookie for server-side authentication and session verification.
2.2 Function
The cookie is used by protected Account and administration pages to maintain verified signed-in state.
2.3 Current Configuration
The current architecture is based on a signed session token. The cookie is host-only because it is not currently configured with a cross-subdomain Domain attribute.
2.4 Duration
The current maximum age is approximately 7 days, subject to earlier expiry, logout, revocation or security invalidation.
2.5 Necessity
Disabling necessary authentication technology may prevent sign-in or continued authenticated use of a Service.
3. Retired Authentication Artifacts
3.1 le_client_session
le_client_session is retired as authoritative authentication state. Migration code clears stale copies.
3.2 le_user
The le_user localStorage value is retired as authoritative authentication or identity state. Migration code clears stale copies.
3.3 Current Source of Identity
Current Account identity is derived from verified server-side session state rather than the retired browser-readable artifacts in clauses 3.1 and 3.2.
4. User-Interface Browser Storage
4.1 Current Uses
LeStudio code currently uses localStorage for selected interface functions, including:
- Desktop icon positions or layout;
- Desktop custom-layout state;
- Start Menu favourites;
- local Snake high score;
- Snake player or display name;
- selected interactive desktop-style public UI layout.
4.2 Purpose
Those values are used to remember choices on the relevant browser and are not used as advertising cookies.
4.3 User Control
Clearing browser storage may reset the affected preferences.
5. Vercel Web Analytics
5.1 Use
LeStudio currently uses Vercel Web Analytics in the root application.
5.2 Provider Description
Vercel states that Web Analytics does not use analytics cookies and uses an anonymised hash derived from an incoming request to distinguish visitors for a limited period.
5.3 Current Visitor Period
Vercel states that the current visitor identity resets after approximately 24 hours.
5.4 Data Points
Analytics data can include page route, referrer, approximate location, browser, operating system and device category.
5.5 LeStudio Minimisation
LeStudio excludes sensitive authentication, Account and administration route families from analytics and strips query strings and URL fragments before analytics delivery.
5.6 Purpose
The current analytics use is intended to provide aggregate information about website and Service use rather than identify individual users for advertising.
6. Cloudflare Turnstile
6.1 Purpose
LeStudio uses Cloudflare Turnstile in registration and enquiry flows for anti-bot, fraud-prevention and security purposes.
6.2 Processing
Turnstile processes security-challenge and browser/environment signals needed to assess automated abuse.
6.3 Siteverify
The server integration may provide the visitor IP address, challenge token and related security information to Cloudflare's Siteverify service.
6.4 Advertising
Turnstile is used for security and not by LeStudio as an advertising technology.
7. Technologies Not Identified in Current Review
7.1 Current Review
The current implementation review did not identify:
- Google Analytics;
- Meta/Facebook advertising pixels;
- advertising cookies;
- behavioural advertising trackers.
7.2 No Absolute Future Statement
Clause 7.1 describes the reviewed implementation and is not a representation that LeStudio will never introduce another technology.
8. Consent, Choice and Browser Controls
8.1 Browser Controls
A user may clear or block cookies or browser storage using available browser settings.
8.2 Effect of Blocking
Blocking necessary technology may prevent sign-in, continued authentication, saving local preferences or completion of security checks.
8.3 Cookie-Less Analytics
Because the current Vercel analytics implementation is described as cookie-less, blocking cookies alone does not necessarily disable that analytics processing.
8.4 Jurisdiction-Specific Consent
Whether consent is legally required for a technology depends on Applicable Law and the technology's actual storage, access and processing behaviour.
8.5 Optional Technology
Where Applicable Law requires prior consent for an optional technology, LeStudio will not rely solely on the absence of a conventional cookie as a basis for avoiding that consent requirement.
9. Future Advertising or Tracking Technology
9.1 Pre-Deployment Review
Before introducing optional advertising, cross-context behavioural advertising, fingerprinting or comparable tracking technology, LeStudio will review the applicable privacy, consent and jurisdictional requirements.
9.2 Notice Update
Where appropriate, LeStudio will update this Notice and implement any required user control before deployment.
10. Relationship with Privacy Statement
10.1 Personal Information
Where a cookie or Similar Technology processes personal information, the LeStudio Privacy Statement also applies.
10.2 Providers
Provider and overseas-processing information is addressed in the Privacy Statement.
11. Changes to this Notice
11.1 Amendments
LeStudio may amend this Notice when its cookie, storage, analytics or security technologies materially change.
11.2 Versioning
A published version will identify its version and effective date.
11.3 Archive
Previous published versions will be preserved through the Legal Archive.
12. Contact
12.1 Privacy Enquiries
Privacy enquiries concerning these technologies may be sent to privacy@lestudio.co.nz.
12.2 Security Enquiries
Security-related reports may be sent to security@lestudio.co.nz.