Cookie & Tracking Policy
Necessary authentication and optional analytics are separate.
Review draft. This document has not been adopted as binding terms and is not legal advice.
Necessary storage
Supabase SSR session cookies maintain sign-in. The authentication page temporarily remembers an email in sessionStorage for link retry; this is cleared through the alternate-email control or browser session. A KartExchange preference cookie records the optional analytics choice for up to 180 days. These controls do not create an advertising profile.
Optional analytics
Vercel Web Analytics is optional in this implementation. It is not mounted until you opt in; Global Privacy Control overrides an analytics preference. No advertising pixel or marketing tracker is configured in the audited layout. Adding a provider requires inventory and consent review first.
Change your choice
Use Privacy choices in the footer to reject, allow or withdraw optional analytics. The browser is reloaded on a choice change so an earlier analytics script no longer remains active. You can also clear browser storage. Necessary authentication may stop working if you block all cookies.
Items for counsel and operator review
Validate production provider behavior and local consent requirements; confirm cookie durations against deployed configuration.
Version history
2026-09-05 — Initial engineering draft for counsel review; not adopted. Permanent version