Last updated: September 3, 2026
The current website is intentionally built with minimal JavaScript and without advertising trackers or external font loading. This policy explains the technical storage that may be used now and what must happen before future tracking tools are added.
Draft website policy for implementation. Replace all demonstration contact details, warranty periods, operational promises and company identifiers with verified STH information, then obtain review from a Bangladesh-qualified legal professional before publication.
Current essential operation
The website may use essential browser behaviour and server records to open navigation, submit forms, prevent abuse, route requests and maintain basic security.
The initial release does not require a marketing-cookie banner because no non-essential advertising or cross-site tracking is intentionally included.
Server logs and rate limiting
Hosting infrastructure may record technical requests for security and operations. The inquiry API may use a one-way network-address hash and timestamps to limit repeated submissions.
These records should be protected and retained only as necessary for their purpose.
Local storage or preferences
If browser storage is later used for accessibility, language, consent or user preferences, it should be documented here with purpose and duration.
Essential storage may be used without optional marketing consent where permitted, but it should remain proportionate.
Future analytics or embeds
Before adding analytics, advertising pixels, embedded video tracking, chat widgets or other non-essential technology, STH must review the provider, update this policy and privacy disclosures and implement consent controls where required.
Non-essential technologies should remain disabled until the user’s choice is recorded where consent is the applicable basis.
Browser controls
Users can control cookies and site storage through their browser. Blocking essential storage may prevent some features from working.
Browser settings do not necessarily prevent server logs required for security or network operation.
Policy updates
The production team should audit website requests after every third-party integration and update this page when storage or tracking changes.