Cookies & device storage
A small amount of storage supports sign-in and invitations.
Current storage
Sign-in cookies: Supabase session cookies, normally named sb-<project-ref>-auth-token and possible numbered chunks, maintain authentication. The installed library sets a maximum age of 400 days, renewed when cookies are refreshed; server-side session validity can be shorter. Sign-out clears the application session cookies.
Invitation storage: sessionStorage key toravii-invite holds the invitation token across sign-in in the same browser tab. It is removed after acceptance or when the tab’s session ends. Restored browser sessions may preserve it. You can clear it below.
Theme settings are saved to your account when you choose Save my style. The current app does not use localStorage for theme preferences.
Optional cookies
The current source includes no analytics scripts, advertising pixels, social-media embeds or optional tracking cookies. There are no optional categories to enable, so this page does not present an “accept all” choice.
Essential device storage is assessed separately from the legal basis for personal-data processing. In Germany, Section 25 TDDDG provides an exception for storage/access strictly necessary for an explicitly requested service. The final deployed cookie inventory must still be checked.
Your controls
You can sign out from the account area or clear site data in your browser. Blocking sign-in cookies can prevent account features from working. Clearing invitation storage only removes the token on this device; it does not cancel the server-side invitation or delete its recipient email.
If optional tracking is added later, it must remain disabled until any required consent is obtained, with an equally accessible refusal and withdrawal choice.