Cookie consent receipts. The browser owns the CURRENT consent state
(per device, enforced client-side); the platform stores the append-only
evidence log (GDPR art. 7.1 — the controller must be able to prove
consent was given, when, and for which policy version).
Revoking is just another receipt with action "revoked" — there is no
server-side state to clear.
Cookie consent receipts. The browser owns the CURRENT consent state (per device, enforced client-side); the platform stores the append-only evidence log (GDPR art. 7.1 — the controller must be able to prove consent was given, when, and for which policy version).
Revoking is just another receipt with action "revoked" — there is no server-side state to clear.