Coherence Auditor — Cookie Declaration
Last updated: October 7th, 2026 · Version 1.1
1. Scope
1.1. Operator and Service. This Cookie Declaration explains cookies, browser storage, and similar technologies associated with Coherence Auditor and its website at https://www.coherenceaudit.ai (the “Service”). WaveAccess USA operates the Service from 10161 Park Run Drive, Suite 150, Las Vegas, Nevada 89145, United States. This Declaration is a notice, not a contract.
2. What Cookies and Similar Technologies Are
2.1. Cookies. Cookies are small pieces of information stored by a browser for a website. First-party cookies relate to the site you visit; third-party cookies relate to another domain whose content or services are used on that site. Session cookies are generally tied to a browser session; persistent cookies have a configured lifetime. Actual durations belong in Section 4.
2.2. Other storage and identifiers. Local storage holds website data in the browser and can persist across sessions. Session storage generally lasts for the relevant tab or browsing session. Similar technologies may store or access identifiers or other information on a device. A request for an external resource can disclose personal data even when it sets no cookie.
3. How We Use Them and Categories
3.1. Result access. A cookie/token on your device makes your generated Result available for approximately 7 days. Access is device-bound; entering your email address on another device does not open the Result.
3.2. Limited availability. The Result is automatically deleted after its approximately 7-day availability period. Clearing or blocking the device storage used for access may prevent you from opening it sooner.
4. The Cookies We Use
Coherence Auditor stores only what is necessary to run the Service on your device. Specifically, we store: (a) an access token that lets you open your generated Result on the same device for a limited period (7 days); (b) your response to the cookie notice; and (c) your display-theme preference (light or dark). All are first-party. We do not use analytics, advertising, or cross-site tracking cookies, and we do not share this information with third parties. Because only strictly necessary and functional storage that you request is used, no prior consent is required; if a non-essential technology is ever introduced, we will ask for consent first.
5. Hosting and Processing
5.1. Hosting. The Service runs on Hetzner infrastructure in Falkenstein, Germany. Website and application data are stored in the EU.
5.2. Related processing. Anthropic processes and stores repository content in the United States for AI analysis, and Twilio SendGrid processes transactional and marketing email in the United States. These personal-data transfers rely on EU Standard Contractual Clauses. The Privacy Policy describes this processing and its retention periods. A cookie-consent choice is not an international-transfer safeguard.
6. Consent for EEA Visitors
6.1. Strictly necessary technologies. Prior cookie consent is not required for storage or access strictly necessary to provide a service you explicitly request. The exemption does not cover a technology merely because it is useful to the operator. Any personal-data processing still requires the applicable privacy disclosures and legal basis.
6.2. Any future non-essential technology. Before introducing technology requiring consent, we will provide clear information and a granular choice, block activation until consent, and allow refusal and easy withdrawal. These choices are separate from optional marketing-email consent.
6.3. Separate legal bases. An exemption from device-storage consent does not remove personal-data protection obligations. The Privacy Policy explains the purposes and legal bases for processing personal data.
7. How to Manage Cookies
7.1. Browser controls. Browser settings generally let you inspect, delete, or block cookies and other site data. The steps vary by browser. Blocking necessary storage may prevent requested features from working. Deleting stored data does not undo information already transmitted or necessarily withdraw a consent choice recorded elsewhere.
7.2. Consent choices. If you give consent for any non-essential technology introduced in the future, you may withdraw it through the consent control as easily as you gave it. Withdrawal does not affect the lawfulness of earlier processing.
8. Changes and Contact
8.1. Updates. We will update this Declaration and its effective date when the technologies or their uses change. Where a change requires consent, it will be obtained before activation. Marketing-email consent remains separate.
8.2. Contact. WaveAccess USA: privacy@coherenceaudit.ai for privacy requests, legal and general inquiries; DPO@wave-access.com for the Data Protection Officer. Postal address: 10161 Park Run Drive, Suite 150, Las Vegas, Nevada 89145, United States. Tel. +1 866 311 2467.