LEGAL // COOKIE POLICY & STORAGE PROTOCOL

Cookie Policy

Transparent disclosure of cookies, local storage mechanisms, and security technologies utilized across SourceLess. Engineered with absolute fidelity to zero third-party tracking and sovereign digital privacy.

COMPLIANCE:GDPR & ePRIVACY

LAST REVISED:OCTOBER 19, 2026

JURISDICTION:SOURCELESS INC.

Section 01

Policy Overview & Data Controller

This Cookie Policy (“Policy”) applies to the www.sourceless.net website (“Website”) and any associated interfaces, portals, and digital services operated by SourceLess Inc. (“SourceLess”, “we”, “us”, or “our”).

SourceLess Inc. acts as the data controller for data processed through cookies, local storage, and similar technologies on this Website. Our corporate headquarters are located at:

SOURCELESS INC.

16192 Coastal Highway

Lewes, DE 19958, United States of America

Electronic Dispatch: support@sourceless.net

This document provides transparent, granular information regarding how and why we utilize cookies, local storage, session storage, and security mechanisms, in full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and Directive 2002/58/EC (ePrivacy Directive).

Section 02

What Are Cookies & Similar Technologies?

HTTP Cookies are compact data files placed on your computer, smartphone, or tablet when you load website pages. Cookies enable websites to store small pieces of contextual data (such as login states or security challenge validations) across page requests.

In addition to standard HTTP cookies, modern web platforms may utilize similar storage technologies:

HTML5 Web Storage

sessionStorage and localStorage store key-value data directly in the browser. Unlike HTTP cookies, this data is never transmitted automatically in HTTP request headers to web servers.

Security Tokens & Nonces

Transient cryptographic tokens generated client-side or edge-verified to validate human interaction and prevent automated brute-force attacks.

Cookies may be classified by duration (Session Cookies, which terminate when your browser is closed, versus Persistent Cookies, which remain stored until their defined expiration date or until manual clearance) and by origin (First-Party, set directly by the domain you visit, versus Third-Party, set by external service partners).

Section 03

Our Zero-Ad Tracking Commitment

As an organization dedicated to post-quantum cryptography, sovereign digital identity, and peer-to-peer web infrastructure, SourceLess does not engage in cross-site behavioral tracking, marketing profiling, or monetization of user telemetry.

Verified Architectural Baseline:

✕ NO Third-Party Advertising Cookies
✕ NO Meta Pixel / Facebook Trackers
✕ NO Google Analytics / Tag Manager
✕ NO Cross-Site Retargeting Pixels
✕ NO Data Broker Telemetry Resale
✕ NO Embedded Tracking Social Widgets

We firmly believe that web infrastructure should respect user sovereignty. We do not use third-party analytics packages or behavioral ad tracking software. The storage technologies detailed below exist solely to safeguard our infrastructure from abusive bots and optimize user interface presentation.

Section 04

Comprehensive Technology & Cookie Inventory

The following exhaustive table details every cookie, web storage entry, and security mechanism deployed within the SourceLess codebase and edge environment:

Technology / Identifier	Provider	Category	Duration	Purpose & Scope
Cloudflare Turnstile cf_clearance / security challenge tokens	Cloudflare, Inc. Notice	Strictly Necessary	Session up to 1 year	Cryptographic bot and spam protection safeguarding form submission endpoints. Currently active on `/careers` and planned for subsequent interactive widget forms.
sl-preloader-seen HTML5 sessionStorage	SourceLess (First-Party)	Functional Preference	Browser Tab Session	Stores a binary flag indicating that the user has already viewed the introductory aerospace preloader animation during the current tab session, preventing repetitive visual interruptions during site navigation.
AresAI Support Chat widget-loader.js · iframe #aresai-widget-frame	AresAI / embeded.aresai.tech Provider	Functional Preference	Session / provider-controlled	Third-party support chat widget (`siteName: sourceless`). Loaded only after Functional Preferences consent. Uses a script and iframe from `embeded.aresai.tech`; may set cookies or similar storage inside the embed according to the provider.
Vercel Edge Network Edge routing & security headers	Vercel, Inc.	Strictly Necessary	Transient / Session	Ensures low-latency global CDN edge delivery, DDoS attack mitigation, request proxy routing, and TLS security termination.
Advertising / Analytics Trackers	None	Not Deployed	N/A	Zero advertising trackers, marketing pixels, or third-party behavioral profiling cookies are loaded anywhere on this Website.

Section 05

Cloudflare Turnstile & Bot Defense

To protect public interactive surfaces from credential stuffing, automated bot submissions, and denial-of-service attempts, we integrate Cloudflare Turnstile, provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).

Unlike traditional CAPTCHA solutions that harvest personal data, deploy persistent advertising tracking, or require interactive puzzle solving, Turnstile delivers a privacy-conscious, non-intrusive alternative. It operates by verifying a series of silent, dynamic client-side cryptographic challenges delivered through scripts and sandboxed iframes hosted on challenges.cloudflare.com.

Key Turnstile Implementation Details:

Where Used Today: Turnstile is active on the /careers candidate submission form, verifying applicant data before transmission to our recruitment dispatch system.
Future Widget Surfaces: As SourceLess launches additional interactive web forms, protocol waitlists, or developer portals, Turnstile will be deployed across those surfaces using the exact same privacy-preserving security model.
Legal Basis: Deployed under Article 6(1)(f) GDPR (Legitimate Interests) and the strictly necessary security exemption of Article 5(3) of the ePrivacy Directive, ensuring that public forms requested by genuine users remain accessible, secure, and uncompromised by malicious botnets.
Impact of Blocking: If your browser or content blocking extension restricts connections to challenges.cloudflare.com, the challenge verification cannot execute, and form submissions on protected pages will be halted to prevent unverified data transmission.

For detailed information regarding Cloudflare’s data processing practices, please consult the Cloudflare Privacy Policy .

Section 06

Session Storage & Performance Preferences

To optimize page load performance and ensure an uncluttered visual experience, the Website utilizes browser sessionStorage:

Identifier: sl-preloader-seen

When you first visit SourceLess, our application displays an aerospace intro preloader counter. Upon completion, a transient flag is saved to your browser’s sessionStorage. As you navigate between internal pages, this flag prevents the intro animation from repeating, ensuring instant page rendering.

LIFESPAN: BROWSER TAB SESSION ONLY • DESTROYED AUTOMATICALLY ON TAB CLOSURE

This entry contains no personally identifiable information (PII), is restricted entirely to your client device, and cannot be read across any third-party websites or external servers.

Section 07

Content Delivery Network (CDN) Assets

To deliver high-definition visual media, vector graphics, and cinematic video elements at low latency, certain static assets are served via a specialized Content Delivery Network hosted on cdn.prod.website-files.com.

Technical Distinction: When your browser requests static image or video files from our CDN, standard HTTP packet headers (including your device IP address and user-agent string) are processed transiently by edge CDN routers to route and deliver the requested media file. This asset delivery mechanism does not set persistent advertising cookies, install tracking pixels, or execute behavioral profiling scripts on your device.

Section 08

Browser Controls & Managing Storage

You maintain full sovereignty over cookies and web storage stored on your device. You can configure your browser to notify you before cookies are set, refuse all cookies, delete existing cookies, or clear local storage caches at any time.

Google Chrome

Settings > Privacy and Security > Third-party cookies > Clear browsing data

Mozilla Firefox

Settings > Privacy & Security > Cookies and Site Data > Clear Data

Apple Safari

Settings > Safari > Advanced > Privacy > Block All Cookies

Brave / Str4tus Browser

Shields > Advanced Controls > Block cross-site cookies > Clear Storage

Manage Stored Consent On This Device

Review, adjust, or revoke your cookie and storage preferences at any time.

Functional Impact of Disabling Storage:

Because SourceLess does not deploy advertising or tracking cookies, blocking advertising cookies in your browser will not affect your browsing experience. However, entirely disabling all scripts or blocking security tokens from challenges.cloudflare.com will prevent interactive form validations (such as careers applications) from completing.

Section 09

Legal Basis Under GDPR & ePrivacy Directive

In accordance with European data protection regulations, storage mechanisms deployed across SourceLess operate under the following legal frameworks:

1. Strictly Necessary Technologies (Exempt from Consent)

Pursuant to Article 5(3) of the EU ePrivacy Directive (Directive 2002/58/EC as transposed into national member state legislation), technical storage or access solely for the purpose of carrying out the transmission of a communication over an electronic communications network, or strictly necessary in order to provide an information society service explicitly requested by the subscriber or user, is exempt from the requirement of prior user consent.

Legal basis under GDPR: Article 6(1)(f) (Legitimate Interests to ensure network security, protocol uptime, and protection against automated fraud).

2. Optional / Non-Essential Tracking Technologies

Should SourceLess ever introduce optional marketing cookies, analytics profiling packages, or non-essential telemetry tools in future releases, such mechanisms will be deployed exclusively following explicit, freely given, specific, and informed prior opt-in consent collected via a compliant consent banner, with granular controls to withdraw consent at any time.

Section 10

Policy Amendments & Inquiries

Modifications & Version Tracking

We reserve the right to amend this Policy to reflect operational, regulatory, or technical changes (such as the integration of new security mechanisms or form widgets). Whenever changes are published, the revised date at the top and bottom of this document will be updated accordingly.

We encourage you to periodically review this page to stay informed of our continuing privacy and security posture. Your continued access to the Website following any posted revisions constitutes your acknowledgment of the updated terms.

Contact Our Data Protection Office

If you have questions, feedback, or concerns regarding our use of cookies, storage technologies, or your privacy rights under GDPR or the ePrivacy Directive, please contact our Data Protection Office:

support@sourceless.net View Privacy Policy

THIS DOCUMENT WAS LAST UPDATED ON OCTOBER 19, 2026