Cookies and local storage
What we store in your browser, what needs consent, how to change it.
Updated September 14, 2026
Cookies and local storage
Last updated: 14 September 2026
Septagram runs as a browser application, so almost everything it remembers is kept in your browser's local storage rather than in cookies. The law treats both the same way: what matters is that something is stored on your device, not what the storage is called. This page therefore covers both.
What we store
Strictly necessary. Keeps you signed in, remembers your language and interface settings, and records your cookie choice. These cannot be switched off and do not require consent.
| Name | Where | Purpose | Retention |
|---|---|---|---|
sb-…-auth-token | Local storage | Your signed-in session (Supabase authentication) | Until sign-out |
app_language | Local storage | Interface language | Until you clear it |
sg_cookie_consent | Local storage | Records your analytics choice | Until you clear it |
app_theme, app_font_scale, week_start, tarot settings | Local storage | Interface preferences you set yourself | Until you clear them |
Analytics. Written only if you accept. They tell us which features are used and where people get stuck. Analytics data is stored in our own database — there is no third-party analytics service, no advertising identifier, and no cross-site tracking.
| Name | Where | Purpose | Retention |
|---|---|---|---|
sg_anon_id | Local storage | A random identifier that links visits from the same browser before sign-in | Until you clear it; server records purged after 12 months |
sg_last_visit_ping | Local storage | Makes sure a visit is recorded once per day, not on every page | 1 day |
Referral attribution. Written only if you arrive through a partner link, so the partner who referred you is credited.
| Name | Where | Purpose | Retention |
|---|---|---|---|
septagram_ref, sg_ref_meta | Local storage | Partner code and click identifier | 60 days |
Advertising. None. We do not run advertising cookies, we do not sell data to advertisers, and we do not embed advertising or social tracking pixels.
Your choices
The banner on your first visit lets you accept or decline analytics. Declining is a single click, the same as accepting. You can change your choice at any time in Settings → Data and privacy.
No analytics is recorded before you accept. Declining keeps the strictly necessary items above, because without them you cannot stay signed in.
Browser controls
You can also block or delete cookies and local storage in your browser settings. Clearing them signs you out and resets your interface preferences; blocking storage entirely will break sign-in.