We run a non-custodial verification layer. We do not run advertising, retargeting, or third-party tracking. The cookies below are either strictly necessary for the platform to work, or optional preferences you control. Last updated 2026-06-26.
You can change your cookie preferences at any time. Choices are stored in jil_cookie_consent (12-month TTL) and a localStorage mirror. Strictly-necessary cookies remain on regardless of choice - they are required by EU ePrivacy Directive Article 5(3) exemption.
These cookies are required for the website to function and are exempt from consent under EU ePrivacy Directive Article 5(3). Disabling them in your browser will break authentication, the docs gate, and security protections.
| Name | Domain | Purpose | TTL | HttpOnly |
|---|---|---|---|---|
| jil_portal_session | .jilsovereign.com | Portal authentication (Google OAuth session, HMAC-signed). Lets signed-in JIL staff cross sub-domains for the verification demo. | 8 hours | Yes |
| jil_docs_index | jilsovereign.com | /docs index-tier access (HMAC-signed weekly key cookie). Required to view the docs manifest. | 30 days | Yes |
| jil_docs_asset | jilsovereign.com | /docs asset-tier access (HMAC-signed weekly key cookie). Required to view individual /docs/*.html files. | 30 days | Yes |
| jil_docs_access | jilsovereign.com | Legacy docs access cookie (being phased out). | 30 days | Yes |
| __cf_bm | .jilsovereign.com / .getjil.com | Cloudflare Bot Management - distinguishes humans from automated traffic. Required for DDoS / scraping protection. Cloudflare cookie reference | 30 minutes | Yes |
| cf_clearance | .jilsovereign.com / .getjil.com | Cloudflare challenge clearance - issued after passing a CAPTCHA. Required to access the site after a security challenge. | 30 days | Yes |
| jil_cookie_consent | .jilsovereign.com / .getjil.com | Stores your cookie preferences. Required to honor the choice you made on the consent banner. Without it the banner would re-appear every visit. | 365 days | No |
Set only with your consent. Each remembers a UI preference so you do not have to re-set it on every visit.
| Name / key | Storage | Purpose | TTL |
|---|---|---|---|
| jil-theme | localStorage | Light / dark theme preference. Falls back to "sovereign-light" if not set. | Persistent (until cleared) |
| jil-lang / NEXT_LOCALE | localStorage / cookie | Selected language for the i18n system. We support 14 locales. | Persistent / 30 days |
JIL does not run Google Analytics, Mixpanel, Segment, Amplitude, Heap, or similar third-party trackers. The only analytics we collect today are Cloudflare's anonymized edge metrics (no cookies set on your device for that) and our own internal request counters (server-side, not cookie-based). If we add a first-party analytics product in the future it will appear in this section before deployment.
If you enter the checkout flow on retail.jilsovereign.com or getjil.com, the embedded Stripe and PayPal forms will set their own cookies on their own domains (stripe.com, paypal.com, paypalobjects.com). These are required to complete payment and prevent fraud. We do not control these cookies; they are governed by:
wallet.getjil.com and office.jilsovereign.com / admin.jilsovereign.com require sign-in. The session cookie above (jil_portal_session) is set after successful Google OAuth and is HttpOnly + Secure + SameSite=Lax. Those subdomains may also set short-lived MFA / TOTP challenge cookies during sign-in flows; these are essential and removed on session close.
Beyond our consent banner, your browser provides the final say:
If you have questions about this policy or want to raise a privacy concern, contact privacy@jilsovereign.com. EU users have the right to lodge a complaint with their local Data Protection Authority. For the broader privacy stance see our Privacy Policy.
