Consent

Record a consent decision (append-only)

Public, unauthenticated. Appends ONE immutable GDPR consent audit record per decision (GDPR Art. 7(1)). The consent banner POSTs each choice here; this is IN ADDITION to client-side enforcement, never a replacement. PII-minimised: stores a pseudonymous subject_id and a TRUNCATED IP (last IPv4 octet / last 80 IPv6 bits zeroed) only — no email, name, raw IP, or user id. region is read server-side from the mnemom_geo cookie; GPC/DNT presence is detected from Sec-GPC/DNT headers (OR'd with the body gpc flag). Malformed input is rejected with 400. Rate-limited per IP.

post/consent

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/consent
  • Auth: none required

Request body

subject_idstring required

Pseudonymous client/session id (the same opaque id the consent-store keeps locally). NOT raw PII.

action'accept_all' | 'reject_all' | 'save_preferences' | 'withdraw' required
consent_stringstring nullable
gpcboolean

Client-observed GPC/DNT signal (OR'd with the request's Sec-GPC / DNT headers).

decided_atstring date-time

ISO-8601 timestamp of the client decision.

Response

Consent decision recorded.

recordedboolean required
idstring uuid nullable
created_atstring date-time nullable

Changes

No recorded changes to this operation across all 1 revision of this API.