Cookies & browser storage
This site doesn't set any cookies. It's a static site with no server behind it — the browser talks to our database directly — so anywhere a typical site would use a cookie, this one uses the browser's localStorage instead. Regulators treat that the same way as a cookie, so here is the full list of what we store and why.
Today that list has three entries: two that make sign-in work at all, and one that remembers a setting you picked. There is no advertising and nothing that tracks you across sites.
| Key | Type | Purpose | Lifetime | Strictly necessary? |
|---|---|---|---|---|
| sb-<project-ref>-auth-token | localStorage | Keeps you signed in between visits. Holds your Supabase session (access token, refresh token, user id) so the app doesn't ask you to sign in again on every page load. | Until you sign out, or the refresh token expires from inactivity. Silently renewed while you're active. | Yes |
| sb-<project-ref>-auth-token-code-verifier | localStorage | A one-time secret (PKCE code verifier) created when you request a magic-link email, and checked when you click the link. Proves the browser that clicked the link is the one that asked for it. | Deleted as soon as sign-in completes. If the link is never clicked, it is overwritten the next time you request one. | Yes |
| uv.axis | localStorage | Remembers whether you last chose release order or in-universe (chronological) order, so the timeline and tracker open the way you left them. Only written when you change the setting. | Until you clear this site's data. | Yes — a setting you chose |
Analytics
We use Cloudflare Web Analytics to count page views and measure how quickly pages load. It sets no cookies, writes nothing to your browser's storage, and doesn't fingerprint your device — it reports each page view on its own, so it can't follow you from visit to visit or across other sites. We only ever see totals, such as how many people viewed a page.
The entries in the table are all exempt from consent under UK GDPR and PECR, because they exist only to keep you signed in, finish the sign-in link you asked for, or remember a setting you chose. The timeline and tracker save nothing else locally. If we add anything non-essential, such as ads, this page will be updated and you'll be asked for consent before it runs.