[E17-S01-T05] Cookie contains no personal/theme data #322

New Issue

2026-08-27T08:05:48Z

kpcto commented

2026-08-27 08:05:48 +00:00

Parent story: [E17-S01] Anonymous preference identity (#123)

Intent

Ensure the preference cookie carries only an opaque token and no personal or theme data.

Acceptance criteria

The cookie value is an opaque token only.
No theme name appears in the cookie.
No personal data appears in the cookie.

Explicitly out of scope

Lazy creation, token generation, hashing, expiration and corrupt-token handling (sibling tasks T01-T04, T06).

Test plan

Assert the Set-Cookie value equals the opaque token.
Assert no theme or personal identifiers appear in the cookie.

Rollback note

Revert the commit. No data changes.

Owning stream

platform

Risk quadrant

agent-full

> Parent story: [E17-S01] Anonymous preference identity (#123) ## Intent Ensure the preference cookie carries only an opaque token and no personal or theme data. ## Acceptance criteria - The cookie value is an opaque token only. - No theme name appears in the cookie. - No personal data appears in the cookie. ## Explicitly out of scope - Lazy creation, token generation, hashing, expiration and corrupt-token handling (sibling tasks T01-T04, T06). ## Test plan - Assert the Set-Cookie value equals the opaque token. - Assert no theme or personal identifiers appear in the cookie. ## Rollback note - Revert the commit. No data changes. ### Owning stream platform ### Risk quadrant agent-full

kpcto added this to the Sprint 5 milestone 2026-08-27 08:05:48 +00:00

kpcto added the

labels 2026-08-27 08:05:48 +00:00

Sign in to join this conversation.