A small, deliberate cookie surface.
Frontiers uses the minimum browser storage needed for sign-in and privacy-conscious operation.
Current prototype policy. The privacy, cookie, terms, and legal content must receive owner/legal review before a commercial launch.
Stored to remember your choice
Frontiers stores one strictly necessary first-party cookie named frontiers.analytics-consent. Its value pairs the current consent-text version with your choice, for example 2026-08-v1:accepted, so a wording change invalidates an earlier choice. The cookie lasts for six months and remembers your measurement choice so the banner does not return on every route; after six months the choice is asked again, including after a refusal. The cookie is readable on the server request and contains no identifier.
Stored only after acceptance
If you accept measurement, the browser may store frontiers.analytics.session in localStorage. It is a random anonymous identifier used to group the allowlisted product events sent to /api/analytics. It remains until you withdraw consent or clear browser storage; Frontiers does not set an automatic expiry. No analytics key is created for a visitor who has not accepted.
Strictly necessary sign-in storage
When you request a Magic Link, frontiers_return_to stores the same-origin page to return to for one hour and is cleared by the sign-in callback. If you sign in, Supabase Auth stores its first-party session cookies for up to 400 days. Neither is analytics, and declining measurement does not sign you out or disable any route.
Nothing else is used for measurement
Frontiers does not load advertising cookies, retargeting pixels, affiliate tracking scripts, or a third-party analytics vendor. Event metadata is allowlisted and sanitized; it does not contain message text, email addresses, or private profile fields.