Cookie and Local Storage Notice
Last updated:
Postamory uses only cookies and similar browser storage that are strictly necessary to provide the service you ask for. We do not use advertising, tracking or profiling cookies and no third-party advertising or social-media plug-ins. Because strictly necessary storage does not require consent, we do not show a cookie banner. This notice is a short form of section 10 of the privacy policy. The legal basis is section 25(2) no. 2 TDDDG: the storage is strictly necessary for us to provide a service you expressly requested. Cloudflare Turnstile, too, serves security only, namely protecting registration and login from automated access.
What we store in your browser
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| Supabase session cookies (sb-...-auth-token) | Keep you signed in after login; strictly necessary | While your session lasts; removed when you sign out | Supabase (first-party cookie set by our site) |
| NEXT_LOCALE | Remembers the language you chose; strictly necessary for the language choice | Up to one year | Postamory (first-party) |
| posta_posts_view | Remembers whether you view the posts as a list or a grid; strictly necessary for the view you chose | Up to one year | Postamory (first-party) |
| Service-worker cache (postamory-shell-...) | Stores static files such as icons and the offline page so the installable app opens without a connection | Until the app is updated or you clear site data | Postamory (first-party) |
| Offline queue (IndexedDB) | Holds a post you wrote offline until it can be sent | Until sent or until you clear site data | Postamory (first-party) |
| Local and session storage entries | Small interface choices such as a dismissed notice or the install hint | Until you clear site data (session storage: until the tab closes) | Postamory (first-party) |
| Cloudflare Turnstile | Technical verification on sign-up and login forms that you are a person | Session | Cloudflare |
Analytics
We measure page views and loading speed with Vercel Web Analytics and Vercel Speed Insights. They work without cookies and without personal identifiers or cross-site tracking. Other processors that receive technical data are Supabase (account, database, storage), Stripe (payments), Resend (e-mail) and Cloudflare (bot protection); see the privacy policy.
How to delete cookies and site data
You can delete cookies and site data at any time in your browser settings, usually under privacy and security, then cookies or site data; search for postamory to remove only our data. You can also block cookies, but then signing in and the language choice will not work. If you installed the app, you can remove it like any app on your device, which also removes its cache. After deleting the data you are signed out and the language is reset.
Questions
Questions about cookies and storage: i116@pm.me.