low complexity extracted Legal Documents Confidence: 100%
4
Components
2
Shared
0
User Stories
Yes
Analyzed

Description

The Cookie Policy feature provides a publicly accessible static page on the Product Sales Website that discloses the cookies and similar tracking technologies set by the site, their purpose, duration, and the legal basis for each category. The page complements the Privacy Policy with specific cookie-level detail required by the ePrivacy Directive and Norwegian implementation. The page is information-only, independent of the operational products, and serves both regulatory disclosure and visitor transparency. It supports any cookie-consent banner the site may implement.

Sources & reasoning

Source explicitly lists Cookie Policy in Sales Website core capabilities (line 168) and area taxonomy (line 387). Subprocessors.md (lines 21-25) confirms minimal cookie surface (no analytics), supporting low-complexity classification. MVP bundled legal scope per §5.

  • Privacy policy, Terms of Service, Data Processing Agreement, Cookie Policy
  • sales-legal | Legal Documents | Privacy Policy, Terms of Service, DPA, Cookie Policy
  • Meander benytter per i dag ikke: Feillogg- eller analyseverktoy (Sentry, Datadog, PostHog, Mixpanel, Firebase Analytics, Crashlytics)

Analysis

Business Value

The ePrivacy Directive (and Norway's Ekomloven implementation) requires explicit disclosure and, for non-essential cookies, prior consent. A documented Cookie Policy is the disclosure component and is legally necessary the moment the marketing site sets any cookie beyond strict necessity. Without it, the site is non-compliant from launch and exposes Norse to regulatory and reputational risk. Beyond compliance, a clear Cookie Policy supports buyer trust during evaluation. Prospective tenant organizations - especially those serving vulnerable populations - scrutinize cookie practices as a proxy for overall data-protection hygiene. Publishing transparent, specific cookie disclosures signals maturity and accelerates legal review during procurement.

Implementation Notes

Implemented as a static page within the Sales Website's static export (Next.js static export, Astro, or plain HTML). Content authored in markdown or JSX and rendered at build time, served from the static CDN. The page must enumerate each cookie category (strictly necessary, functional, analytics, marketing if any), provider, duration, and purpose. Linked from the global footer and from any cookie-consent banner. Because Subprocessors.md confirms no analytics tools are currently in use (Sentry, PostHog, Mixpanel, Firebase Analytics all excluded), the MVP cookie inventory is minimal - primarily session/CSRF cookies from the demo-booking form handler. Versioned via git; "last updated" date displayed.

Quality Assurance

Prospective Buyer (leser)
1
Scenarios
5
UAT Steps
10
A11y Annotations
4
Role Boundaries
Prospective Buyer

Prospective Buyer

Quick UAT

  1. Åpne Meander sales-nettsiden i mobil eller desktop nettleser uten Ă„ logge inn.
  2. Scroll til bunnen av forsiden og trykk pÄ lenken 'Cookie Policy' i footeren.
  3. Bekreft at Cookie Policy-siden lastes og viser tittel, sist-oppdatert dato og oversikt over essensielle cookies brukt av demo-skjemaet.
  4. Verifiser at siden henviser til EU ePrivacy-direktivet og ekomloven §2-7b, samt bekrefter at ingen analytics-cookies er aktive per dags dato (jf. Subprocessors.md).
  5. Naviger tilbake til forsiden via nettleserens tilbakeknapp og bekreft at footer-lenken fortsatt er synlig.

Quick UAT — Accessibility

  1. Åpne Meander sales-nettsiden i mobil eller desktop nettleser uten Ă„ logge inn.
    • Zoom Layout brukbar ved 200% zoom uten horisontal scrolling.
  2. Scroll til bunnen av forsiden og trykk pÄ lenken 'Cookie Policy' i footeren.
    • Screen reader Lenken annonseres som 'Cookie Policy, lenke' av VoiceOver/JAWS/TalkBack.
    • Keyboard / focus Footer-lenken nĂ„s via Tab-rekkefĂžlge; Enter aktiverer.
    • Focus visibility Synlig fokusring pĂ„ lenken med kontrast ≄ 3:1 mot bakgrunn.
    • Touch target Lenke har minst 24×24 CSS-piksler tap-omrĂ„de.
  3. Bekreft at Cookie Policy-siden lastes og viser tittel, sist-oppdatert dato og oversikt over essensielle cookies brukt av demo-skjemaet.
    • Screen reader Sideoverskrift 'Cookie Policy' annonseres som heading nivĂ„ 1; landmarks main/header eksisterer.
    • Keyboard / focus Tab-rekkefĂžlge: skip-link → header → main heading → seksjoner.
  4. Verifiser at siden henviser til EU ePrivacy-direktivet og ekomloven §2-7b, samt bekrefter at ingen analytics-cookies er aktive per dags dato (jf. Subprocessors.md).
    • Zoom Tabell over cookies forblir lesbar ved 200% zoom uten tap av innhold.
    • Contrast BrĂždtekst har kontrast ≄ 4.5:1; viktige notiser merkes ikke kun med farge.
  5. Naviger tilbake til forsiden via nettleserens tilbakeknapp og bekreft at footer-lenken fortsatt er synlig.
    • Focus visibility Fokus returneres til 'Cookie Policy'-lenken i footer etter back-navigasjon.

Role Boundaries

4 role(s) must NOT access this feature
  • Peer Mentor (Likeperson)

    Cookie Policy er en offentlig sales-nettsideside uten pÄlogging; peer mentors har ingen rolle her, men siden skal vÊre tilgjengelig for alle besÞkende uten autentisering.

  • Coordinator (Koordinator)

    Ingen autentisert tilgang kreves; siden er offentlig. Koordinator-rolle gir ingen ekstra rettigheter pÄ denne siden.

  • Organization Administrator

    Siden er offentlig statisk innhold; admin-rolle gir ingen redigeringsmuligheter fra sales-website (innhold redigeres i kildekoden, ikke via admin-portalen).

  • Global Administrator

    Siden er offentlig statisk innhold; global admin har ingen runtime-redigering av sales-website-innhold.

Expected End State

Prospective Buyer har lest Cookie Policy-siden, forstÄtt hvilke cookies som brukes (kun essensielle for demo-skjemaet, ingen analytics per nÄ), og kan navigere tilbake til forsiden. Siden er offentlig tilgjengelig uten pÄlogging og oppfyller ekomloven §2-7b og EU ePrivacy-direktivets opplysningsplikt.

User Stories

No user stories have been generated for this feature yet.