Encrypted by default. Consent settings are always user-controlled.