Browse documentation

Regulatory and platform sources

Generated from the catalog. Dates below record retrieval/search, not legal effective dates. read means source content was retrieved; search-result means the recorded finding was found in search output and needs full-text review; blocked is an unresolved gap. Neither retrieval nor search is a legal review.

SRC-EU-GDPR

GDPR official text

Type: law. Checked: 2026-10-18. Access: read.

SRC-EU-EDPB

EDPB cookie banner taskforce report

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-FR-CNIL

CNIL: tracker requirements

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-DE-TDDDG

Germany TDDDG section 25

Type: law. Checked: 2026-10-18. Access: read.

SRC-IT-GARANTE

Garante: cookie guidelines and repeated prompts

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read official guidance and summary; repeat-prompt mechanics are in guideline sections 6.2 and 7.1. Legal applicability/review remains open.

SRC-IT-GUIDE

Garante cookie guidelines

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read official guidance and summary; repeat-prompt mechanics are in guideline sections 6.2 and 7.1. Legal applicability/review remains open.

SRC-ES-AEPD

AEPD: cookie consent and choice visibility

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Retrieved official FAQ. Accept/reject paragraph explicitly requires simultaneous, same-level, equally visible choices.

SRC-IE-DPC

Irish DPC: cookies and tracking guidance

Type: regulator-guidance. Checked: 2026-10-18. Access: search-result.

SRC-UK-ICO

ICO: storage/access exception conditions

Type: regulator-guidance. Checked: 2026-10-19. Access: read.

Read statistical/appearance qualifications and the simple objection guidance; legal applicability and actual provider behavior require separate review.

SRC-CH-FDPIC

FDPIC: updated cookie guidance

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read the 7 October 2025 clarification on selected advertising/location contexts and high-risk profiling. The linked full guidelines remain separate research.

SRC-BR-ANPD

ANPD: final cookies and personal-data guide

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Final October 2022 guide linked from the current ANPD landing page; do not use the separate 290-page administrative process containing drafts.

SRC-CA-OPC

OPC: meaningful consent

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-CA-OBA

OPC: online behavioural advertising

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-QC-CAI

Québec CAI: private-sector collection and profiling functions

Type: regulator-guidance. Checked: 2026-10-18. Access: search-result.

SRC-AU-OAIC

OAIC: tracking pixels and privacy obligations

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Full guidance inspected: ongoing tracking-technology review, collection notice and sensitive-information considerations. Discovery supplies limited observations only.

SRC-NZ-STATEMENT

NZ OPC: what a privacy statement must cover

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Full regulator page retrieved. Lists collection awareness, purpose/use, recipients, optionality/consequences and access/correction; context and applicable exceptions remain separate review.

SRC-NZ-IPP3A

NZ OPC: indirect-collection notification

Type: regulator-guidance. Checked: 2026-10-19. Access: read.

Full regulator guidance read. Covers notification content, reasonable steps, timing, collector/holder roles, lawful indirect collection and exceptions. Implementation remains legally unreviewed.

SRC-NZ-IPP3A-PRINCIPLE

NZ OPC: Principle 3A and reproduced principle text

Type: regulator-guidance. Checked: 2026-10-19. Access: read.

Full regulator page read, including reproduced IPP3A(1)-(7). Particulars, timing and exceptions are separately assessed; not independent legal review.

SRC-ZA-DM

South Africa: POPIA direct-marketing guidance

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-US-CA

California agency: consumer rights and 2026 regulation update

Type: official-explanation. Checked: 2026-10-18. Access: read.

FAQ expressly disclaims legal/regulatory interpretation. Current regulation-level GPC requirements are separately sourced from the January 2026 regulations.

SRC-US-CA-UI

California agency: avoiding dark patterns

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

SRC-US-CO

Colorado AG: universal opt-out mechanisms

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Current official page retrieved; selected GPC processing, notice and conflict provisions verified. Broader law amendments and applicability still require review.

SRC-US-CT

Connecticut AG: CTDPA and opt-out signals

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Current official page retrieved; selected GPC processing, notice and conflict provisions verified. Broader law amendments and applicability still require review.

SRC-US-VA

Virginia AG: VCDPA summary

Type: regulator-guidance. Checked: 2026-10-18. Access: search-result.

SRC-US-COPPA

FTC: revised COPPA rule

Type: regulator-guidance. Checked: 2026-10-18. Access: search-result.

SRC-US-COPPA-RULE

2025 COPPA final rule and compliance dates

Type: law. Checked: 2026-10-18. Access: read.

Read dates and final §312.5(a)(1)–(2) text. No parental-verification implementation or full COPPA support claim.

SRC-TR-KVKK

KVKK: processing conditions

Type: regulator-guidance. Checked: 2026-10-18. Access: search-result.

SRC-TR-COOKIES

KVKK: cookie-processing enforcement decision summary

Type: regulator-decision. Checked: 2026-10-18. Access: search-result.

Case-specific; do not generalize every finding to all cookies or transfer arrangements.

SRC-EU-CONTRACTS

European Commission: unfair contract terms

Type: official-explanation. Checked: 2026-10-18. Access: read.

SRC-EU-WITHDRAWAL

Directive 2023/2673: online contract withdrawal function

Type: law. Checked: 2026-10-18. Access: search-result.

Official indexed text provides Article 11a labels/fields, confirmation function and acknowledgement content/time; direct full text/PDF remained behind a script/robot challenge. National implementation and sector/window review remain open.

SRC-DE-CANCEL

Germany BGB section 312k: cancellation

Type: law. Checked: 2026-10-18. Access: read.

Consolidated BGB section 312k read directly. Direct confirmation-page fields/action, savable declaration, immediate electronic text confirmation and default earliest termination are distinct requirements. Current case law and contract/sector applicability still need review.

SRC-DE-WITHDRAW

Germany BGB: electronic withdrawal function

Type: law. Checked: 2026-10-18. Access: read.

Consolidated BGB section 356a read directly: accessible continuously available function during the right, identification/acknowledgement details, confirmation action and durable acknowledgement. Date/window/sector eligibility is not inferred by the module.

SRC-BR-CONSUMER

Brazil Consumer Defence Code

Type: law. Checked: 2026-10-18. Access: read.

Article 49 read directly. The initial module does not infer a universal eligibility window or implement refunds.

SRC-GOOGLE-CONSENT

Google Consent Mode overview

Type: platform-policy. Checked: 2026-10-18. Access: read.

SRC-GOOGLE-CMP

Google publisher CMP requirements

Type: platform-policy. Checked: 2026-10-18. Access: read.

SRC-IAB-TCF

IAB Europe TCF

Type: industry-standard. Checked: 2026-10-18. Access: read.

SRC-WCAG

WCAG 2.2

Type: technical-standard. Checked: 2026-10-18. Access: read.

SRC-IUB-OVERVIEW

iubenda legal requirements overview

Type: secondary-explainer. Checked: 2026-10-18. Access: search-result.

SRC-IUB-COOKIES

iubenda regional cookie consent comparison

Type: secondary-explainer. Checked: 2026-10-18. Access: read.

Useful discovery index, not authority; regional cells and older summaries need primary-source checks.

SRC-IUB-US

iubenda US privacy implementation guide

Type: secondary-explainer. Checked: 2026-10-18. Access: read.

SRC-IUB-BR

iubenda LGPD product/requirements outline

Type: secondary-explainer. Checked: 2026-10-18. Access: search-result.

SRC-IUB-WITHDRAWAL

iubenda online withdrawal-function article

Type: secondary-explainer. Checked: 2026-10-18. Access: read.

SRC-IUB-TERMS

iubenda terms legal changelog

Type: secondary-explainer. Checked: 2026-10-18. Access: search-result.

SRC-SG-PDPC

Singapore PDPC selected-topics guidelines

Type: regulator-guidance. Checked: 2026-10-18. Access: blocked.

Current page/PDF blocked by bot verification. Older indexed 2018/2021 excerpts are insufficient to mark a current pack researched.

SRC-JP-PPC

Japan PPC legal-text index

Type: official-explanation. Checked: 2026-10-18. Access: read.

Index links a 2023 consolidated translation; linked law fetch returned 403. A separately found June 2020 PDF has obsolete numbering and was not used to encode a rule.

SRC-EU-CRD-20260927

Consumer Rights Directive 2011/83/EU, consolidated 27 September 2026

Type: primary-law. Checked: 2026-10-19. Access: read.

Selected current Articles 6, 8 and 22a reread in browser after direct tool retrieval encountered a challenge. Article 8(2) now includes 6(1)(la), the conditional durability label, alongside (a), (e), (o), (p). Consolidation, scope and national implementation still require review.

SRC-EU-EDPB-CONSENT

EDPB Guidelines 05/2020 on consent, version 1.1

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read sections 3.1.3, 3.3.1, 3.4 and 5.1–5.2: purpose granularity, informed affirmative action, evidence and easy withdrawal. Scope/duration need contextual review; no prescribed software schema.

SRC-MDN-IFRAME

MDN iframe element reference

Type: platform-documentation. Checked: 2026-10-18. Access: read.

Sandbox, referrer policy, source navigation and load/error limitations. Technical behavior, not a legal applicability rule.

SRC-MDN-IMAGE

MDN image element reference

Type: platform-documentation. Checked: 2026-10-18. Access: read.

Resource source and image alternative/error behavior. Visibility or lazy loading does not establish permission.

SRC-US-CA-REGS-2026

California CCPA regulations effective 1 January 2026

Type: law. Checked: 2026-10-18. Access: read.

Read section 7025(b)–(c), pp. 44–48: qualifying signals, conflicts, known profiles/accounts, status and absence after a prior signal. Financial-incentive exceptions and re-opt-in require separate reviewed workflows.

SRC-W3C-GPC

W3C Global Privacy Control editor draft

Type: platform-specification. Checked: 2026-10-18. Access: read.

Current editor draft: header field value and duplicates, boolean navigator property, top-level navigation caching and optional support resource. This is not a finalized standard or a legal rule.

SRC-W3C-RESOURCE-TIMING

W3C Resource Timing candidate recommendation draft

Type: technical-standard. Checked: 2026-10-18. Access: read.

Work in progress dated 1 September 2026. Resource inclusion, frame boundaries, cross-origin masking and bounded buffers limit discovery; an entry is not proof of successful network delivery.

SRC-US-VA-CODE

Virginia Code: Consumer Data Protection Act

Type: law. Checked: 2026-10-18. Access: read.

Read definitions, §59.1-578(A)(5) sensitive-data provision and §59.1-577(C) appeals. Other provisions, including specialized minor/social-platform rules, are not implemented by the generic scope guard.

SRC-EU-RIGHTS-GUIDE

EDPB small-business guide: respecting individuals’ rights

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read rights-entry procedures, identity-doubt guidance and distinctions among rights. The software does not implement request fulfillment.

SRC-US-CA-AG-RIGHTS

California Attorney General: CCPA consumer request methods

Type: official-explanation. Checked: 2026-10-18. Access: read.

Read request-to-know/delete/correct methods and existing-account provisions, and the distinct sale/sharing opt-out verification discussion. Methods differ by business and request context; no universal email-only rule is inferred.

SRC-CF-DO-EXPORTS

Cloudflare: Durable Object class exports

Type: platform-documentation. Checked: 2026-10-18. Access: read.

Read the current declarative exports flow, SQLite class binding example and its mutual exclusion with legacy migrations. Deployment and destructive namespace operations remain explicit host actions.

SRC-CF-WRANGLER-CONFIG

Cloudflare: Wrangler configuration

Type: platform-documentation. Checked: 2026-10-18. Access: read.

Checked JSON/JSONC configuration, Worker entry, worker-first assets, bindings and class exports. Named Durable Object bindings and vars do not inherit; assets/exports whole-object inheritance was checked against installed Wrangler 4.151.1. Account, routing and endpoint behavior remain host decisions.

SRC-CF-DO-SQLITE

Cloudflare: SQLite-backed Durable Object storage

Type: platform-documentation. Checked: 2026-10-19. Access: read.

Read SQLite-backed storage, asynchronous KV and transaction semantics used by scoped adapters and paid-order local admission. The host callback must use local transaction reads and return writes; external payment/network side effects are excluded. No universal retention or locality claim is inferred.

SRC-EU-EPRIVACY-MARKETING

ePrivacy Directive consolidated 19 December 2009, Article 13

Type: legislation. Checked: 2026-10-18. Access: read.

Read Article 13(1)–(5). Selected electronic direct-marketing rules, conditioned customer exception and national choices; national transposition remains separate research.

SRC-CA-CASL-S10

CASL section 10: express consent and implied-consent circumstances

Type: legislation. Checked: 2026-10-18. Access: read.

Read subsection 10(1) request purpose/identity/prescribed information, and 10(9)–(10) implied-consent conditions. Page states current to 2026-09-30; exceptions are not inferred by the toolkit.

SRC-CA-CRTC-548

CRTC 2012-548: consent requests and unsubscribe guidance

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read paragraphs 5–20: sender/contact information, readily performed unsubscribe, separate requests and separation from general terms. Full prescribed particulars and sending workflow remain host/regional review.

SRC-CA-CRTC-549

CRTC 2012-549: affirmative express consent

Type: regulator-guidance. Checked: 2026-10-18. Access: read.

Read paragraphs 4–8: default opt-out does not obtain express consent; positive opt-in mechanisms and confirmation guidance. No sending or confirmation delivery is supplied.

SRC-GOOGLE-CONSENT-SETUP

Google consent mode implementation guide

Type: platform-policy. Checked: 2026-10-18. Access: read.

Reviewed defaults-before-measurement and update ordering; gtag and GTM template APIs differ.

SRC-GOOGLE-PRIVACY-CONTROLS

Google tag privacy controls and Analytics disable flag

Type: platform-policy. Checked: 2026-10-18. Access: read.

Reviewed GA4 ga-disable flag and send_page_view control. This does not provide a general Ads unload or zero-network guarantee.

SRC-BR-ECOMMERCE

Brazil Decree 7,962/2013: electronic consumer contracts

Type: law. Checked: 2026-10-18. Access: read.

Article 5 addresses the same contracting tool, immediate acknowledgement and application-side financial notification; the optional ledger/dispatch API does not perform those external operations.

SRC-CF-DO-ALARMS

Cloudflare: Durable Object alarms

Type: platform-documentation. Checked: 2026-10-19. Access: read.

Read the at-least-once alarm contract, finite automatic failure retries and host-managed continuation. The dispatch helpers return outcome data; they do not install an alarm, queue, scheduler or retry policy.

SRC-OPEN-COOKIE-DATABASE

Open Cookie Database: cookie metadata CSV

Type: dataset. Checked: 2026-10-19. Access: read.

Seed candidate for cookie metadata. No dataset imported. Cookie-level categories do not establish actual site use, legal basis, necessity or a complete provider/product profile.

SRC-OPEN-COOKIE-LICENSE

Open Cookie Database repository license

Type: license. Checked: 2026-10-19. Access: read.

Apache License 2.0. Any future import must pin its exact source revision, preserve applicable notices/attribution and identify modifications.

SRC-BROWSER-GOOGLE-TAG

Google Tag official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Google tag loader path and gtag bootstrap; one tag can have multiple product destinations. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-GOOGLE-GTM

Google Gtm official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Tag Manager script/frame paths; only HTTPS is recognized by these rules. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-STRIPE-JS

Stripe Js official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Documented script delivery host; no payment feature or provider-practice classification. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-STRIPE-VERSION

Stripe Version official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Versioned loader path and supported legacy v3 delivery. Rule is not a version recommendation. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-TURNSTILE

Turnstile official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Widget loader path, div class marker and turnstile API object. No challenge is executed. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-INTERCOM

Intercom official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Widget loader prefix and Intercom function; app/workspace suffix is never exported as a witness. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-POSTHOG-COOKIE

Posthog Cookie official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Official tutorial excerpt describes a project-token-derived cookie name; only the name pattern is matched, never its value. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-POSTHOG-LOADER

Posthog Loader official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Official tutorial excerpt describes asset-host rewriting and the array.js path. Custom hosts and proxies may not match. Technical reference reviewed, not legal/provider-practice verification; external documentation is not reproduced.

SRC-BROWSER-POSTHOG-REGIONS

Posthog Regions official technical reference

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Official proxy guide names US and EU asset hosts. Technical endpoint reference only; no inference about an operator deployment region or transfers. External documentation is not reproduced.

SRC-LINEAR-DESIGN-2026

Linear — A calmer interface for a product in motion

Type: design-reference. Checked: 2026-10-19. Access: read.

March 2026 product-design reference: restrained navigation, hierarchy, compact controls, quieter separators and neutral surfaces. Visual direction only, not an accessibility or legal authority. No Linear assets are reproduced.

SRC-CF-NO-TRANSFORM

Cloudflare Web Analytics — automatic injection and no-transform

Type: platform-documentation. Checked: 2026-10-19. Access: read.

Official technical documentation: automatic setup can inject the beacon; Cache-Control public,no-transform prevents payload modification and automatic injection. This is transport behavior, not a legal exemption or a guarantee about every hosting feature.

SRC-PROFILE-CLOUDFLARE-PLACEMENT

Workers placement

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-CLOUDFLARE-REGIONAL

Regional Services for Workers

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-CLOUDFLARE-PRIVACY

Cloudflare privacy policy

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-CLOUDFLARE-DPA

Cloudflare customer DPA

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-STRIPE-ROLES

Stripe privacy center

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-STRIPE-PRIVACY

Stripe privacy policy

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-STRIPE-DPA

Stripe DPA

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Generic public DPA URL resolved to a localized page during retrieval. Check the agreement and entity for the actual account; no provider verification is implied.

SRC-PROFILE-SUPABASE-REGIONS

Supabase project regions

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-SUPABASE-RESIDENCY

Supabase residency and transfers FAQ

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-SUPABASE-SELF-HOSTING

Supabase self-hosting

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-SUPABASE-PRIVACY

Supabase privacy policy

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-SUPABASE-DPA

Supabase DPA

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-RESEND-STORAGE

Resend GDPR and storage FAQ

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-RESEND-DOMAINS

Resend domain settings

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-RESEND-PRIVACY

Resend privacy policy

Type: technical-documentation. Checked: 2026-10-19. Access: read.

Public technical/legal reference read for these original notes. No provider practice or legal approval is implied; external text is not reproduced.

SRC-PROFILE-RESEND-DPA

Resend DPA

Type: technical-documentation. Checked: None. Access: blocked.

Public reference URL recorded. Two retrieval attempts failed (timeout/internal error); its contents were not reviewed. Follow the link to review the current agreement.

SRC-EU-GUARANTEE-REG

Commission Implementing Regulation (EU) 2025/1960

Type: primary-law. Checked: 2026-10-19. Access: read.

Articles 1-3 and Annexes I-II read in browser. Prescribed unchanged notice and limited editable label fields, online colour, optional nested display; applies from 27 September 2026.

SRC-EU-GUARANTEE-GUIDE

Commission practical guidelines on the guarantee notice and GARAN label, April 2026

Type: official-guidance. Checked: 2026-10-19. Access: read.

Selected sections 2-3 read, including digital display, producer edits, durations, font, QR destinations and product/order placement. Preliminary Commission-services guidance, not an authoritative Court interpretation.

SRC-EU-GUARANTEE-ASSETS

Commission official guarantee notice and label source files

Type: official-assets. Checked: 2026-10-19. Access: read.

Page read and SVG/PDF notice archives plus GARAN template downloaded. Source archive and per-file hashes recorded. Notice SVGs contain outlined text and embedded PNG QR; GARAN template has live Inter text without embedded fonts. Actual source colours differ from statutory reference HEX values; no silent correction or conformity claim.

SRC-EU-REUSE

European Commission legal and reuse notice

Type: official-guidance. Checked: 2026-10-19. Access: read.

Reuse/copyright section read. General CC BY 4.0 policy has exceptions for logos/names/third-party rights. Prescribed artwork is not relicensed as Apache or represented as project branding.

SRC-EU-ORDER-CONNY-SUMMARY

CJEU C-400/22 Conny: official press summary

Type: court-summary. Checked: 2026-10-19. Access: read.

Official press summary read. Full judgment is recorded separately as SRC-EU-ORDER-CONNY. The judgment takes precedence.

SRC-EU-ORDER-CONNY

CJEU C-400/22 Conny judgment

Type: court-judgment. Checked: 2026-10-19. Access: read.

Full primary judgment retrieved and read, including paragraphs 42–56 and the operative part. Payment-obligation action also applies where payment depends on a later condition. Current EUR-Lex direct requests can show a JavaScript verification challenge.

SRC-EU-ORDER-FUHRMANN

CJEU C-249/21 Fuhrmann-2 judgment

Type: court-judgment. Checked: 2026-10-19. Access: search-result.

Indexed primary judgment excerpts reviewed, including paragraphs 28 and 34; official press release also read. The wording on the button itself must unambiguously express payment obligation. Full judgment retrieval remains open; direct requests show a JavaScript verification challenge.

SRC-CF-DO-LIMITS

Cloudflare: Durable Object storage limits

Type: platform-documentation. Checked: 2026-10-19. Access: read.

Read SQLite combined key/value 2 MB and legacy KV value 128 KiB limits. The paid-order archive uses its own portable 64 KiB chunk profile; these bounds are engineering constraints, not legal deadlines or retention rules.

SRC-EU-DURABLE-CONTENT-SERVICES

CJEU Content Services, C-49/11, 5 July 2012

Type: primary-law. Checked: 2026-10-19. Access: search-result.

Official indexed judgment/summary: paragraphs 35, 42–51 and operative part reject the ordinary hyperlink arrangement in that case. Adequate future access and unchanged reproduction matter; the advanced-website question was left open. Direct full-text retrieval encountered a script/robot challenge. Prior Directive 97/7 context; current-law and national application require review.

SRC-UK-DUAA-STORAGE

Data (Use and Access) Act 2025: Schedule 12 storage/access amendments

Type: legislation. Checked: 2026-10-19. Access: read.

Read Schedule 12 inserting PECR Schedule A1, especially paragraphs 5 and 6 (printed pages 233–234; PDF pages 243–244). This enacted source is read alongside current regulator guidance, not a complete commencement or national-applicability determination.