Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device by a website. Along with cookies, AmmoIQ also uses related browser storage technologies including localStorage, IndexedDB, and service worker caches. These technologies allow websites to remember information about your visit, store data locally on your device, and enable features such as offline access. This policy covers all such technologies used by AmmoIQ.

2. Essential Cookies

These cookies are strictly necessary for the Service to function. They cannot be disabled.

• JWT authentication cookie: An httpOnly, SameSite=Lax cookie (Secure flag enabled in production) that stores your session token. This cookie keeps you signed in across page loads.
• Refresh token cookie: An httpOnly cookie used for session rotation, allowing your login session to be extended securely without re-entering credentials.
• Cloudflare security cookies: __cf_bm (bot mitigation) and __cflb (load balancing) are set by Cloudflare to protect the Service from malicious traffic and distribute requests across servers.

3. Functional Storage

AmmoIQ uses browser storage APIs to support application functionality and offline access:

• localStorage: The ammoiq-cookie-consent key stores your cookie consent preferences. UI preferences such as theme and display settings are also stored in localStorage.
• IndexedDB: Used by the Progressive Web App (PWA) to cache offline data, including the ballistics engine and ammo specifications, enabling the calculator to work without an internet connection.
• Service worker cache: Static assets (JavaScript, CSS, images) are cached by the service worker to enable offline calculator use and improve load performance.

4. Analytics (Consent Required)

AmmoIQ uses Umami for website analytics. Umami is a privacy-respecting analytics platform that:

• Does not perform cross-site tracking
• Does not collect personal data
• Aggregates and anonymizes all usage data
• Does not use third-party cookies

Umami analytics is only loaded after you explicitly select "Accept All" via the cookie consent banner. If you choose "Essential Only," no analytics scripts are loaded.

5. Third-Party Cookies

Certain third-party services may set their own cookies when you interact with specific features:

• Stripe: Session-scoped cookies set during payment processing to facilitate secure transactions.
• Cloudflare Turnstile: Cookies used during CAPTCHA verification to distinguish human users from automated bots.
• Google OAuth: Session cookies set during the OAuth authentication flow when you sign in with Google. These cookies are not persistent on AmmoIQ.

6. How to Manage Cookies

A cookie consent banner is displayed on your first visit to AmmoIQ. You may choose "Accept All" to enable analytics alongside essential cookies, or "Essential Only" to limit storage to what is strictly necessary for the Service to function.

To reset your consent preferences, clear the ammoiq-cookie-consentitem from your browser's localStorage. You can do this from your browser's developer tools (Application > Local Storage) or by clearing all site data.

Browser Settings

• Chrome:Settings > Privacy and Security > Cookies and other site data
• Firefox:Settings > Privacy & Security > Cookies and Site Data
• Safari:Preferences > Privacy > Manage Website Data
• Edge:Settings > Cookies and site permissions > Cookies and data stored

Note: Disabling essential cookies will prevent you from logging into AmmoIQ. The ballistics calculator will continue to work in offline mode via the PWA, but authenticated features will be unavailable.

7. EU ePrivacy and GDPR Compliance

AmmoIQ sets non-essential cookies (such as analytics) only after obtaining your explicit consent, in accordance with GDPR Article 7. Consent is:

• Freely given (no pre-checked boxes or forced acceptance)
• Specific (you choose which categories to accept)
• Informed (this policy details what each cookie does)
• Unambiguous (requires a clear affirmative action)

You may withdraw your consent at any time by resetting your cookie preferences as described in the section above.

Essential cookies operate under the "strictly necessary" exemption provided by Article 5(3) of the ePrivacy Directive and do not require consent. These cookies are limited to what is technically required for the Service to function.

8. Contact

If you have questions about this Cookie Policy, please contact us at [email protected].

For more information about how we handle your personal data, see our Privacy Policy.