Cookies and Local Storage

The public site does not deliberately set advertising or analytics cookies. The admin area uses a first-party session cookie after an authorised administrator logs in.

• Cookie: bfa_admin_session - first-party, HTTP-only, Secure in production, SameSite=Lax, path /admin, maximum age 8 hours. Purpose: authenticated admin access. Necessary: yes. Consent required: no.
• Vercel Web Analytics is enabled but the installed implementation injects the Vercel analytics script and does not set an analytics cookie in this application code.

The website uses browser storage to provide requested functionality and preserve route context locally.

• localStorage: safer_fireworks_privacy_preferences - stores this privacy notice record only: version, optionalAccepted:false and updatedAt. It does not store name, email, postcode, answers, MP information or generated responses. Necessary: yes, to remember that this notice has been shown. Consent required: no.
• localStorage: consultationWorkspace - saves consultation interview answers, current interview step, generated consultation drafts, edits, improvement history, active workspace stage, Government online-form opened status, MP journey status and safe share-stage progress. Necessary: yes, for the user-requested autosave and restore feature. Consent required: no.
• localStorage inside consultationWorkspace: analyticsSelectionSnapshot - saves only a short hash and timestamp of the last structured option-selection snapshot sent to analytics, so unchanged regeneration does not duplicate aggregate counts. Necessary/statistical: yes for duplicate prevention. Consent required: no.
• localStorage: safer-fireworks-consultation-interview - legacy consultation progress key read once for migration and then removed when the current workspace is saved. Necessary: yes for continuity of previously saved progress. Consent required: no.
• localStorage: consultationAssistantEntrySource - saves a non-personal entry-source value when a visitor arrives from the homepage consultation banner. Purpose: route context and aggregate campaign measurement. Consent required: no optional consent switch is currently provided because it does not identify a user or enable cross-site tracking.

The consultation workspace does not store MP personal details such as name, address, postcode, personal email address, MP contact details or generated MP email text. Stored values are not shown on this policy page and are not a server database.

The Government response-email and response-document flows do not store respondent name, respondent email address or organisation details in local storage.

Session storage is used to prevent duplicate analytics milestone events during the same browser session.

• sessionStorage: safer-fireworks-consultation-analytics:assistant-started
• sessionStorage: safer-fireworks-consultation-analytics:interview-completed
• sessionStorage: safer-fireworks-consultation-analytics:progress-25
• sessionStorage: safer-fireworks-consultation-analytics:progress-50
• sessionStorage: safer-fireworks-consultation-analytics:progress-75
• sessionStorage: safer-fireworks-consultation-analytics:progress-100

These values store only a "1" flag for the current browser session so the site does not send duplicate broad analytics milestone events while the same tab is open.

Consultation autosave is used to provide functionality requested by the user and to recover progress if the page is refreshed or the user returns later. The assistant can technically run without persistence, but the saved-progress and restore feature is part of the service presented to users and includes a clear control to remove saved consultation data from the current browser.

Vercel Web Analytics records aggregated page and event information without analytics cookies or a cross-site persistent visitor cookie in this implementation. The installed package injects the Vercel analytics script and queues pageview/event calls. Custom consultation events are designed to use broad, non-identifying categories and actions. Structured final selection analytics count only question and option identifiers, not free-text answers, generated responses or personal details. See Vercel Web Analytics privacy information.

You can use the "Clear my saved consultation data" control in the Consultation Assistant to remove this site's consultation-related local and session storage from your current browser.

You can also clear site data using your browser settings.

The first-visit privacy banner is an information and preferences notice, not an optional marketing-consent prompt. The current repository audit did not find advertising cookies, analytics cookies or optional tracking technologies that require an accept/reject choice. If this changes, the privacy preference version should be updated and non-essential technologies should be blocked until the visitor has chosen.