Cookie & Similar Technologies Policy
Effective: 25 August 2026
This policy explains our use of cookies and similar technologies (local storage, pixels, SDKs). It applies to both people and the automated agents that increasingly read the web on their behalf — see §5 and §6.
1. The short version
At launch, Rare Human runs on essential cookies only. We set no analytics, advertising, or cross-site tracking technologies. Because we set nothing non-essential, no consent banner is legally required — only this notice. If that ever changes, we will ask for your consent before setting any non-essential cookie, through a proper consent manager, and update this policy first.
2. What a cookie is
A cookie is a small file a website can store on your device; "similar technologies" (local storage, session storage) do the same job in different ways. Under UK/EU law (PECR / the ePrivacy Directive), storing or reading anything on your device that is not strictly necessary to provide the service you asked for requires your prior consent.
3. What we use
| Category | Do we use it? | Consent needed? |
|---|---|---|
| Strictly necessary — security, load-balancing, remembering your language choice for the current visit, keeping the waitlist form working | Yes, minimally | No — exempt by law |
| Functional / preferences (beyond the essentials above) | Not at launch | Yes, if added |
| Analytics / performance | No | Yes, if added |
| Advertising / tracking / cross-site | No — never | — |
Any strictly-necessary items we do use are first-party, short-lived, and carry no advertising identifier. We do not use them to build a profile of you.
4. Managing cookies
You can block or delete cookies in your browser settings at any time. Blocking strictly-necessary items may stop parts of the site (like the waitlist form) from working. Because we set nothing non-essential, there is nothing here to "opt out" of — but your browser's controls, and any Global Privacy Control (GPC) signal you send, are respected.
5. If we add analytics later (how we'll do it)
We will only add non-essential technologies through a consent-first design:
- Nothing non-essential loads until you actively agree.
- A clear banner with equal "Accept" and "Reject" choices — rejecting is one click, never buried.
- Your choice is logged and honoured, and re-askable.
- We will prefer privacy-preserving, cookieless analytics that do not identify you where possible.
This policy will be updated to list exactly what is set, by whom, and for how long, before any of it goes live.
6. Cookies, banners and AI agents
An AI agent visiting on your behalf renders the page and may execute scripts, but it does not "click accept." A cookie banner therefore cannot meaningfully capture an agent's consent. Our approach:
- We default to deny non-essential storage for any visitor whose consent we do not have — so an agent that never consents simply never triggers non-essential cookies. (At R0 this is automatic, because we set none.)
- We publish our cookie and consent expectations in a machine-readable form at
/.well-known/alongside our other agent surfaces, so an agent can read what we do rather than guess from a banner. - Where a future action needs a person's consent, we expect it to arrive as a verifiable mandate carrying that person's decision — not an unattributed dismissal of a banner.
This is the practical meaning of "secured by WorldAuth": consent and authority travel as evidence an agent can present, not as a click it has to fake. Full reasoning is in our agent-consent note.
7. Contact
Questions about this policy: privacy@rarehuman.ai.
Rare Human — secured by WorldAuth.