Authentication — necessary storage
Supabase SSR uses project-scoped authentication cookies, sometimes split into chunks, to maintain and refresh sessions; verification flows can use supporting authentication state. Application cookie handling uses SameSite=Lax and Secure in production. The installed SSR library has a default cookie maximum age of 400 days, which is not a guarantee that a token or session remains valid for that long. Signing out or clearing authentication cookies removes access from that browser until you sign in again.
Theme and language — preferences
The sterling-world cookie remembers Day or Midnight. The sterling-interface-language cookie remembers the interface language, including on signed-out screens; a signed-in account also has a server-stored language preference. Both preference cookies use a one-year maximum age, Path=/ and SameSite=Lax, with Secure on HTTPS/production. The interface-language cookie is HttpOnly. They contain a preference value rather than a browsing history.
Vercel Web Analytics — analytics
Production analytics runs only on the main path, About and legal pages. Other paths, including messages, profiles, notifications, drafts, billing and account pages, are excluded; the transmitted page URL has its query string and fragment removed. Vercel describes Web Analytics as cookie-free, using a request-derived visitor hash discarded after 24 hours. Its usage data includes page/device/browser/referrer and approximate location information. This is separate from private account search evidence. The current site has no analytics-consent banner; this description is not a conclusion that consent is or is not required.
Payment and external providers
Checkout, billing-portal and hosted invoice links take you to Stripe. Those provider-hosted pages can use their own cookies or storage for payment and security; they are not a marketing-cookie integration added to Lord Sterling pages. External source websites and browser push services have their own practices. The platform cannot promise that removing its preference cookies removes provider-held records.
Other storage and promotions
The current application source does not use localStorage or sessionStorage for personal records or entitlements. Account data, search evidence, notification preferences and promotion receipts are stored server-side. Browser push, when available and enabled by you, uses browser-managed service-worker/subscription state. Internal platform promotions do not add an external advertising pixel; external advertising is currently closed. No marketing-cookie integration is represented as active.
Controls
Browser settings let you inspect or remove website cookies and manage notification permissions. Clearing authentication cookies can sign you out; clearing theme/language cookies can reset those choices. Use account settings for server-stored preferences. Clearing browser storage does not delete your account, messages, invoices or other server records. Contact cleanandcraftnl@gmail.com for data-handling questions.