Cookies
Last updated 26 August 2026
Why there is no cookie consent banner
We only use storage that is strictly necessary to sign you in, plus a few preferences you set yourself. Under the ePrivacy Directive, strictly necessary cookies are exempt from the consent requirement, and so is remembering a choice you actively made — so asking you to accept them would be a pointless click. Signed out, this site sets no cookies at all. The page-view measurement we added on 2 September 2026 sets no cookie and no identifier, which is why it is not in the table above and why you are not being asked to accept anything. If we ever add something that does track you across sites or builds a profile, we will ask first, properly.
What is actually set
| Name | Purpose | Lifetime |
|---|---|---|
| sb-…-auth-tokenSupabase (first-party)Strictly necessary | Keeps you signed in between page loads. Without it you would be logged out on every navigation. | Session, refreshed while you stay active |
| cigarshelf:notificationsFirst-party (localStorage, not a cookie)Functional preference | Remembers whether you switched lounge sound alerts on. Only written after you tap the bell. | Until you clear site data |
| cigarshelf:themeFirst-party (localStorage, not a cookie)Functional preference | Remembers whether you chose the light or the dark theme. Only written after you press the switch, and kept on this device rather than on your account. | Until you clear site data |
| cigarshelf:indexViewFirst-party (localStorage, not a cookie)Functional preference | Remembers whether you last browsed the cigar index as a gallery or a list. Only written after you switch between them. | Until you clear site data |
What we don't set
No advertising cookies, no social media pixels, no cross-site trackers, and nothing that builds a profile of you. We do measure page views, through Vercel Analytics — but it is cookieless: it stores nothing on your device, sets no identifier, and cannot follow you to another site or recognise you when you come back.
Turning them off
You can clear or block cookies in your browser settings. Blocking the authentication cookie will stop you being able to sign in, since it is what keeps your session alive. Clearing the notification preference simply resets the bell to off.