Last updated: 23 July 2026
Cookies & Local Storage
How this static Adoracle site and local-first Android app handle cookies and device storage.
1. Summary
This static landing website is designed to work without analytics cookies, ad pixels, retargeting tags, external fonts, or embedded third-party social widgets.
2. Website technical access and logs
When you visit the website, the hosting provider may process technical access data such as IP address, time, requested URL, referrer, and user agent. This is used to deliver the website, protect the service, and troubleshoot issues. See the privacy policy for details and retention placeholders.
3. App local storage
The Adoracle Android app may use local storage, IndexedDB, and device app storage to keep app settings, quest history, photos, and preferences on your own device.
This local storage is necessary for the local-first app experience. It is not used for hidden advertising tracking in the default MVP. You can clear it through the app or Android app settings.
4. Cookie/storage table
| Name/type | Purpose | Duration | Provider | Required? |
|---|---|---|---|---|
| Server logs | Security, delivery, troubleshooting. | [[SERVER_LOG_RETENTION_DAYS]] days | [[WEB_HOSTING_PROVIDER]] | Yes |
| Local storage / IndexedDB | Local settings, quest progress, local records, optional offline data. | Until user deletes local data or app clears it. | Adoracle/local device | Yes for local-first features |
| Portal session / OAuth PKCE storage | Keeps the Supabase session, sign-in handshake, pending invitation, and stable browser installation identity. | Session-only for invitations; persistent until sign-out or browser data deletion for account and installation storage. | Adoracle / Supabase | Yes for the optional account portal |
| Analytics cookies | Not used in this static template. | Not applicable | None | No |
| Advertising / retargeting pixels | Not used in this static template. | Not applicable | None | No |
5. If analytics or advertising are added later
If Adoracle later adds non-essential analytics, ad pixels, embedded social widgets, cross-site tracking, or affiliate tracking cookies, the website/app must request consent before activation and update this page and the privacy policy. Consent must be voluntary, informed, specific, and revocable.