Policy unavailable

Cookies and necessary storage

Draft necessary-storage notice. Optional cookies are not used at launch.

Version
2026-08-03-draft.1
Effective date
Not in effect

A verified policy version is unavailable right now.

Draft status and current boundary

This is a draft notice, not a production-active cookie policy. At launch, the approved boundary permits only necessary authentication, security, and locale storage. Optional analytics, advertising, profiling, and marketing storage are not used.

Necessary technologies

  • Textelling locale cookie: first-party preference used only to select an initial unprefixed route; it is not an advertising or analytics identifier.
  • Authentication-provider session storage: necessary to maintain an authenticated session and protect sign-in.
  • Short-lived security-intent storage: necessary to protect approved authentication operations.

Future optional choices

If optional technologies are separately approved later, Textelling will provide equal Accept and Reject choices, granular preferences, withdrawal, and Global Privacy Control handling where applicable. This future model is not active now, so no meaningless cookie banner is shown.

Necessary technologies in use

This inventory describes the cookies and browser storage used by the current service launch.

Name or pattern
textelling-delete-challenge
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Bind account deletion to a fresh verification challenge.
Data category
Opaque operation identifier and random verification nonce; no email or project content.
When used
When a signed-in user requests a deletion verification code.
Scope
Current site, Path=/api/account-deletion.
Lifetime
Up to 10 minutes.
Deletion
Removed after use, on expiry, or when site data is cleared.
Name or pattern
textelling-delete-receipt
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Recover deletion progress after sign-out or an interrupted response.
Data category
Opaque operation identifier and restricted progress capability; no account content.
When used
When irreversible account deletion is confirmed.
Scope
Current site, Path=/api/account-deletion.
Lifetime
Up to 24 hours; renewed when a valid progress receipt is checked.
Deletion
Expiry, a new signed-in account, or clearing browser cookies.

Pending account browser cleanup

Name or pattern
textelling.account-deletion.pending-cleanup.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Retry cleanup of only the account browser namespaces bound to this deletion operation.
Data category
Hashed account cache and migration namespaces, with an opaque deletion operation identifier in the pending cleanup record; no guest data or account content.
When used
When irreversible account deletion is confirmed.
Scope
Current Textelling origin and browser tab.
Lifetime
Until matching browser cleanup succeeds or the tab session ends.
Deletion
Successful matching browser cleanup, closing the tab session, or clearing site data.

Account deletion browser write barrier

Name or pattern
textelling.account-deletion-scopes.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Prevent account browser caches from being rewritten after deletion; same-origin BroadcastChannel signaling carries only hashed namespaces and has no persistent store.
Data category
Hashed account cache and migration namespaces, with an opaque deletion operation identifier in the pending cleanup record; no guest data or account content.
When used
When account deletion has been accepted and browser writers must stop.
Scope
Current Textelling origin and browser tab.
Lifetime
Current browser tab session.
Deletion
Closing the tab session or clearing site data.
Name or pattern
textelling-locale
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Remember the selected interface language.
Data category
Selected language code.
When used
When a visitor selects a language.
Scope
Current site, Path=/.
Lifetime
Browser session.
Deletion
Removed when the browser session ends or site data is cleared.
Name or pattern
sb-*-auth-token*
Technology
Cookie
Provider
Supabase
First party
Yes
Classification
Necessary
Purpose
Maintain and refresh an authenticated session.
Data category
Authentication session tokens managed by Supabase.
When used
During sign-in and authenticated session refresh.
Scope
Current site, Path=/.
Lifetime
Managed by the Supabase authentication session.
Deletion
Removed through sign-out, session expiry, or clearing site data.
Name or pattern
__Host-textelling-link-intent
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Protect a request to link another login method.
Data category
Provider, expiry, and a security nonce.
When used
When an authenticated user starts linking a login method.
Scope
Current site, Path=/.
Lifetime
Up to 10 minutes.
Deletion
Removed after use, on expiry, or when site data is cleared.
Name or pattern
__Host-textelling-registration-acceptance
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Carry the short-lived state for registration acceptance.
Data category
Registration intent, expiry, and a security nonce.
When used
When registration acceptance is created.
Scope
Current site, Path=/.
Lifetime
Up to 10 minutes.
Deletion
Removed after use, on expiry, or when site data is cleared.
Name or pattern
__Host-textelling-account-acceptance
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Carry short-lived state for accepting the current account Terms and Privacy.
Data category
Account acceptance intent, expiry, language and security nonce.
When used
When signup or existing account acceptance is prepared.
Scope
Current site, Path=/.
Lifetime
Up to 10 minutes.
Deletion
Removed after use, on expiry, or when site data is cleared.
Name or pattern
__Secure-textelling-claim-attempt-*
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Protect the first step of opening a Creator project claim.
Data category
Opaque claim-attempt state; the cookie name includes a hashed token tag.
When used
When a Creator project claim link is opened.
Scope
Current site, Path=/claim.
Lifetime
Up to 30 minutes.
Deletion
Removed during the claim transition, on expiry, or when site data is cleared.
Name or pattern
__Secure-textelling-claim-possession-*
Technology
Cookie
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Continue an opened Creator project claim.
Data category
Opaque claim-possession state and a bounded handoff identifier.
When used
When a valid Creator project claim is opened.
Scope
Current site, Path=/claim.
Lifetime
Up to 7 days.
Deletion
Removed after claim completion, on expiry, or when site data is cleared.

Site story creation request session

Name or pattern
textelling.site-tools.requests.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Resume an explicitly requested site-tool or form project creation without duplicating it on retry.
Data category
Request identifiers, input digests, creation timestamps, opaque account scope and completion state; no message text.
When used
When you explicitly create a story through the form or a visiting assistant.
Scope
Current browser tab.
Lifetime
Current browser tab session.
Deletion
Closing the tab session or clearing site data.

Guest project creation session

Name or pattern
textelling.guest-project-creation.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Resume one guest project creation request in the current tab.
Data category
Creation request ID, preset, and locale.
When used
When a guest starts or resumes project creation.
Scope
Current browser tab.
Lifetime
Current browser tab session.
Deletion
Removed after the created project loads, when the tab closes, or when site data is cleared.

Account project creation session

Name or pattern
textelling.account-project-creation.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Resume one signed-in project creation request in the current tab.
Data category
Creation request ID, project ID, preset, and locale.
When used
When a signed-in user starts or resumes project creation.
Scope
Current browser tab.
Lifetime
Current browser tab session.
Deletion
Removed after the created project loads, when the tab closes, or when site data is cleared.

Public template copy session

Name or pattern
textelling.public-template-copy.v1
Technology
Session storage
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Create an independent editable project from a public template without duplicating it on retry.
Data category
Template version, copy request ID, new project ID, and locale.
When used
When a visitor opens a public template as a new editable project.
Scope
Current browser tab.
Lifetime
Current browser tab session.
Deletion
Removed after the created project loads, when the tab closes, or when site data is cleared.

Local projects and assets database

Name or pattern
viraltexts-assets
Technology
IndexedDB
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Store local project records, media, and related operation state.
Data category
Project records, media bytes, metadata, and operation state.
When used
When local projects or media are created, loaded, or updated.
Scope
Current browser profile and Textelling origin.
Lifetime
Persists until Textelling site data is cleared in the browser.
Deletion
Removed when Textelling site data is cleared in the browser.

Local editor state database

Name or pattern
viraltexts-editor-state
Technology
IndexedDB
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Store local attachment-tray editor state.
Data category
Project, scene, asset references, and revision state.
When used
When a scene attachment tray is loaded or updated.
Scope
Current browser profile and Textelling origin.
Lifetime
Persists until Textelling site data is cleared in the browser.
Deletion
Removed when Textelling site data is cleared in the browser.

Account project recovery database

Name or pattern
textelling-account-project-sync-v1
Technology
IndexedDB
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Protect unsynced Account project changes during cloud recovery.
Data category
Unsynced project, cloud base version, and opaque request identifier. After account deletion, only hashed scope write-barrier markers remain; they contain no account content.
When used
When an Account project change is waiting for cloud sync or conflict recovery.
Scope
Current browser profile and Textelling origin, separated by opaque account scope and project ID.
Lifetime
Project recovery persists until cloud sync succeeds, confirmed reload discards it, or Textelling site data is cleared. Account deletion write-barrier markers remain until site data is cleared.
Deletion
Removed after confirmed cloud sync, confirmed cloud reload, or clearing Textelling site data.

Account image library cache

Name or pattern
textelling-account-image-cache-v1
Technology
IndexedDB
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Cache account image metadata and verified preview bytes for faster browsing.
Data category
Account image metadata and verified preview bytes.
When used
When a signed-in person browses their Account image library.
Scope
Current browser profile and Textelling origin, separated by opaque account scope.
Lifetime
Persists until Textelling site data is cleared in the browser.
Deletion
Removed when Textelling site data is cleared in the browser.

Local-to-account project handoff database

Name or pattern
textelling-project-cloud-state-v1
Technology
IndexedDB
Provider
Textelling
First party
Yes
Classification
Necessary
Purpose
Coordinate safe project transfer to an account and remember the local-work warning.
Data category
Opaque account scope, local project ID, content digest, request and lease state, plus the leave-warning decision.
When used
When a local project is transferred to an account or its local-work warning is acknowledged.
Scope
Current browser profile and Textelling origin, separated by opaque account scope and project ID.
Lifetime
Persists until project transfer succeeds, the local project is deleted, or Textelling site data is cleared.
Deletion
Removed after completed transfer, local project deletion, or clearing Textelling site data.

Contact

Privacy Officer / Responsable de la protection des renseignements personnels
Email [email protected]

Privacy in Free mode

Projects and media in the guest export flow are processed on your device. The server receives page and asset requests and export authorization requests; operational logs may include IP addresses and request paths. Instagram receives a request only if you choose its link.