Cookie and Browser Storage Notice

1. Authentication and security

Cloud authentication can use Supabase session/refresh cookies whose names and duration depend on its configuration. Independently deployed direct-PostgreSQL installations use the signed guidon-session cookie with an expiry set by their operator. OAuth flows can use short-lived state and PKCE-related cookies. These support login, verification and security; blocking them may prevent the requested service from working.

2. Requested preferences

The theme cookie remembers appearance. sidebar_state remembers expanded/collapsed navigation for up to seven days. guidon-mini-filter and guidon-mini-project remember choices in the mini task view. Browser localStorage can remember background style/motion, sound and other device preferences selected in the interface. Local storage has no automatic browser expiry unless cleared or removed by the application.

These choices are distinct from permission to track you for advertising or analytics. Use only storage necessary for the requested feature; adding another purpose requires a separate assessment and, where necessary, consent.

3. Optional analytics and existing cookies

This version does not include the Google Analytics script or create Google Analytics cookies. Earlier versions could have loaded Google Analytics and left cookies such as _ga or _ga_* in your browser. Removing the script does not by itself erase those old cookies or information already received by Google.

You can remove stored site data through your browser's privacy settings and consult Google's privacy controls for information it already holds. Optional analytics must not be re-enabled without a suitable informed opt-in and a way to withdraw it. We do not treat visiting the site, dismissing a notice or accepting the service terms as analytics consent.

4. Controls and external providers

You can clear or restrict cookies and storage through your browser, reset choices in the application, and disconnect available integrations. Clearing storage may sign you out or reset preferences. Authentication providers or external sites opened at your request have their own storage practices. Sentry diagnostics and server access logs, where configured, are described in the Privacy Policy rather than hidden under a claim that the service performs no monitoring.

For a question or privacy request, contact guidon.support@gmail.com.