Cookies and device storage

The short version

No analytics. No advertising. No third-party tracking. No pixels. Nothing here follows you anywhere.

This app sets three cookies, and every one of them is needed for it to work at all: one keeps you signed in, one remembers your language, and one is part of the bot check that protects the sign-in form.

The cookies

Name	What it does	How long
sb-<project>-auth-token	Keeps you signed in. Written httpOnly, so page scripts cannot read it.	Until you sign out, or the session expires
NEXT_LOCALE	Remembers whether you chose English, French or Italian.	One year
__cf_bm / cf_chl_*	Set by Cloudflare during the sign-in bot check. Distinguishes a person from a script; not used to profile you.	Up to 30 minutes

Storage that is not a cookie

A cookie is not the only way an app puts something on your device, and the rules are about the storage rather than the mechanism. So this is disclosed too:

What	What it does	How long
IndexedDB — session drafts	Holds the session you are entering so shots survive a lost connection, a reload or a closed tab. It stays on the device until the session is saved to your account.	Until the draft is saved or discarded

This is the feature that lets you finish a session on a range with no signal. The draft never leaves your device until it is saved to your account.

Why there is no banner

Consent is required for storage that is not strictly necessary. Everything above is strictly necessary — remove any of it and the app stops signing you in, stops speaking your language, or stops protecting your account. There is nothing to consent to, and a banner asking permission for something you cannot refuse only teaches people to dismiss the banners that matter.

If that ever changes, this page changes and you will be asked properly.

Your control

Signing out clears the session cookie.
Your browser can delete any of these at any time, through its own settings. Deleting the session cookie signs you out; deleting the language cookie means the app asks your browser again.
Clearing site data removes an unsaved session draft as well. Save first.

Questions about anything on this page: pistol@ristep.studio.