Your browser choice
The first-party cs_consent cookie stores only the consent version, website-analytics choice, explicit-save time and language. It lasts 180 days from Save, Accept or Reject, unless removed earlier. It is host-only, applies to the whole site and uses SameSite=Lax and Secure on HTTPS. It remembers refusal as well as permission. This storage supports the choice you requested; it is not an authentication token or a server-side consent audit record.
Authentication and requested preferences
Supabase authentication uses first-party cookies with the sb-[project-ref]-auth-token pattern, sometimes split into numbered chunks, and may use temporary PKCE code-verifier storage during sign-in. The installed SSR library’s default cookie maximum age is 400 days; renewal, sign-out and browser restrictions can shorten or change persistence. This is not the token’s validity or the retention period for account data. NEXT_LOCALE remembers an explicitly selected language for one year. cs_last_mode remembers creator/host navigation mode for one year. These service and preference uses are assessed separately from optional analytics; their deployed behavior and exemption grounds must be confirmed before publication.
Local storage is storage too
The theme local-storage key remembers light, dark or system appearance. space-discovery-view remembers the selected discovery view. space-wizard-space-id remembers a listing draft identifier; the legacy space-wizard-data key is removed when wizard progress is cleared; cs_first_payout_prompt_dismissed_v1 remembers dismissal of a payout prompt. security_alerts and error_reports support local diagnostic/security interfaces where used. Local storage has no automatic cookie-style expiry unless the feature removes it; it can remain until cleared by the feature, you or your browser. These keys are first-party service, preference or diagnostic storage, not purposes enabled by the analytics switch. Necessity and retention assessments remain subject to review.
Optional website analytics
Vercel Web Analytics loads only after permission and receives only the allowed public-discovery page views and limited registration event names. This implementation does not enable an analytics cookie or send custom event properties. Collection is paused while Supabase sign-in or PKCE cookies are present, to avoid including them in same-origin analytics requests; saved permission remains unchanged. Already-dispatched requests cannot be recalled. Cookieless does not automatically mean anonymous or exempt from consent. Technical requests still reach a provider. Provider-side identifiers, network-data handling and retention require legal and configuration review; no unverified retention period is stated here.
Maps, diagnostics and other services
Mapbox maps and Sentry diagnostics are separate integrations, not switches in this preference panel. A complete provider/storage and telemetry classification remains a publication requirement. Do not interpret rejection of Vercel analytics as disabling all external requests or every optional technology. Supabase and email services also process information needed for their configured features.
Change or clear your choice
Use Privacy settings below to allow or reject optional website analytics. The choice applies to this browser across language changes and sign-in/out, including a shared device; it does not synchronize across devices. Closing the panel without saving changes nothing. Removing browser storage can sign you out, reset preferences and make the notice appear again. Blocking necessary storage can prevent service features from working. Newsletter and account settings remain separate.
Your privacy rights
This opens your email app; nothing is sent until you send the message yourself. Support may need proportionate identity verification. Do not attach identity documents or bank details to your initial message.
support@stellart.io