Draft policy pending owner and legal review. Not yet in effect.
DRAFT — not legal advice — requires owner and legal review before publication.
Engineering must confirm the exact names below against the shipped build before publication. Placeholders in [OWNER: …] / [ENG: …].
Cookies and Browser Storage
Last updated: [OWNER: date]
Summary
By default we use only storage that is strictly necessary to make the site work: keeping your draft on your device, keeping you signed in, and remembering a few display choices. We do not use analytics, advertising, social-media pixels, or session recording, so there is no cookie banner by default.
What we store on your device
| Name / store | Type | Set by | Purpose | Duration | Necessary? |
|---|---|---|---|---|---|
| [ENG: IndexedDB database name] | IndexedDB | Our site | Your guest draft (answers and photos) before you sign in, so nothing leaves your device until you choose to save | Until you clear site data or finish/clear the draft [ENG: confirm clearing behaviour after claim] | Yes — it is the feature you asked for |
| oyt-unsaved:<draft id> | localStorage | Our site | A short-lived copy of your draft's words (no photos), written only when you close or leave the page, so the last thing you typed isn't lost if the browser closes before saving | Until your draft next saves (usually immediately on return) or is deleted | Yes — it protects the draft you asked us to keep |
| [ENG: e.g. sb-<project-ref>-auth-token] | Cookie (first-party) | Supabase Auth via our site | Keeps you signed in and protects your account | [ENG: lifetime/refresh behaviour] | Yes |
| [ENG: any PKCE/code-verifier or CSRF cookie] | Cookie | Supabase Auth / our site | Completes email-link or Google/Apple sign-in securely | Short-lived [ENG] | Yes |
| [ENG: e.g. __cf_bm or host security cookie, if any] | Cookie | [OWNER: hosting provider] | Bot protection / security | [ENG] | Yes |
Stripe Checkout runs on Stripe's own page (checkout.stripe.com). Stripe sets its own cookies there for payment and fraud prevention under Stripe's privacy and cookie policies [OWNER: link]. We do not load Stripe tracking scripts on our pages [ENG: confirm — if Stripe.js is loaded on our pages, list its cookies].
Gift pages (what recipients see) use no cookies except security cookies set by the host [ENG: confirm], and do not track viewers.
Important: browser storage does not move between browsers or devices. A guest draft on your phone's browser is not visible in another browser until you sign in and save it.
How to clear it
You can clear cookies and site data in your browser settings. Clearing site data deletes an unsaved guest draft permanently — we have no copy of it.
If optional tracking is ever added
[OWNER: no optional tracking is planned. If an advertising pixel (e.g., Meta) is later added to the landing page only:]
- it will be listed in this table with its provider, purpose and duration;
- it will not load on the editor, account, checkout-return or gift pages;
- where the law requires consent (e.g., Quebec, EU/UK if enabled), it will not load until you opt in, with an equally easy "Decline" option and a way to change your choice later;
- PRIVACY.md will be updated before it goes live. US state privacy laws may treat pixels as "sharing" — [LAWYER: review before adding].