1. What are cookies?
Cookies are small values a website stores or reads on your device. Similar technologies such as sessionStorage temporarily hold information in your browser. Strictly necessary technologies may operate without consent to provide a requested service; non-essential analytics require prior consent.
2. Inventory
| Name or technology | Provider and purpose | Category | Duration |
|---|---|---|---|
| sb-<project>-auth-token, possibly split into .0, .1, and so on | Supabase. Keeps you signed in, refreshes the session, and secures account features. | Strictly necessary when signed in. | Up to 400 days; refreshed and removed on sign-out where technically possible. |
| tentora_cookie_consent | Tentora. Remembers your cookie choice. | Strictly necessary preference. | Up to 6 months. |
| sessionStorage-routecache | Tentora. Temporarily caches recent routes in the active browser tab. | Functional for the requested route feature. | Until the browser session ends. |
| _ga | Google Analytics. Distinguishes browsers for visit measurement. | Analytics — after consent only. | Up to 2 years. |
| _ga_<container-id> | Google Analytics. Stores and counts session and campaign state. | Analytics — after consent only. | Up to 2 years. |
| Vercel Web Analytics | Aggregate page measurement using a daily hash. | Cookie-free according to Vercel. | No cookie; visitor identification resets after 24 hours. |
3. Vercel Web Analytics
Vercel receives limited data points such as page, referrer, time, broad location, browser, operating system, and device type. Vercel states that it uses no cookies, does not associate stored data points with an IP address, and does not track a visitor across different days or websites.
4. Google Analytics
Google Analytics is not strictly necessary. Its tag and analytics cookies may activate only after you accept analytics. We use it for aggregate visit and usage statistics, not to analyse account emails, private account data, or saved route coordinates.
5. Manage your choice
The cookie banner lets you accept or reject non-essential cookies. Rejection does not block core functions. Once the banner is active, the footer’s “Cookie preferences” link must let you change your choice just as easily. Browser controls can also remove cookies, but doing so may sign you out.
6. Contact and updates
Send cookie questions to privacy@tentora.app. We will update this list when technologies, providers, or retention periods change.