Ryan Jarvis trading as DPPLogic · Nanny Cay, Tortola, British Virgin Islands · support@dpplogic.com

Versions: tos-2026-09-17-v1 · privacy-2026-09-22-v2 · dpa-2026-09-17-v1. Not a BVI company, not VAT registered, no company number, no licensing claim.

Cookies and local storage.

No advertising or marketing cookies are configured in the SaaS application source. The public WordPress assessment uses necessary form and recovery cookies described below. Host and administrator technologies are separate from application cookies.

SaaS application cookies and storage

• __Host-dpp — strictly necessary production session: Secure, HttpOnly, SameSite=Lax, 12-hour maximum, with a 30-minute server idle timeout.
• __Host-dpp-proof — strictly necessary signup/login browser proof: Secure, HttpOnly, SameSite=Strict, 10 minutes.
• __Host-dpp-assessment-nonce and __Host-dpp-public-code — strictly necessary public-assessment handoff browser binding and opaque code: Secure, HttpOnly, 15 minutes. The nonce uses SameSite=Lax for the explicit cross-site continuation; the code uses SameSite=Strict.
• __Host-dpp-assessment — strictly necessary pending assessment import: Secure, HttpOnly, SameSite=Lax, 12 hours.
• dpp_cp_access — strictly necessary restricted-production access gate: Secure, HttpOnly, SameSite=Strict, 12 hours. It is separate from customer authentication.
• dpplogic.ui.locale — functional localStorage preference for workspace language.

Public WordPress / assessment estate

• dpp_bridge_session — STRICTLY_NECESSARY — 30-minute Secure HttpOnly SameSite=Lax ticket binding.
• dpp_qc_result — STRICTLY_NECESSARY — 15-minute Secure HttpOnly SameSite=Lax Quick Check result token.
• dpp_stg_assessment — STRICTLY_NECESSARY — 24-hour Full Assessment resume cookie when that journey is enabled.
• In-memory dataLayer only. No third-party analytics transport in plugin source.
• WordPress.com / Automattic may set cookies for hosting security or authenticated administration. These are separate from DPPLogic workspace authentication; administrator cookies are not required to take the anonymous assessment.

What is not configured in application source

• No advertising cookies, marketing pixels or SaaS analytics cookies.
• No consent banner is shown for cookies that do not exist.
• Non-essential scripts must not be added without a prior-consent gate where applicable law requires consent.