Legal & help · English
Cookies and Browser Storage
Status and limits
UNPUBLISHED ENGLISH WORKING DRAFT — NOT APPROVED FOR PRODUCTION. No public effective date has been set. Legal review, required appointments and permissions, final consent/rights procedures, and actual release qualification remain outstanding. These documents do not activate a customer contract or certify compliance. Termly’s scan failed with a technical error. This is a source-code inventory, not a completed production scan, native SDK audit, browser trace or confirmation that third-party cookies are absent. No consent banner or new tracking script was installed.
Purpose
Browser storage enables the requested offline encrypted vault and limited sign-in, invitation, deletion and language state. Not every storage item is a cookie; similar-storage rules can still apply. The source does not implement advertising pixels, session replay or marketing analytics. Do not infer that every SDK or future host is cookie-free.
Encrypted vault
IndexedDB database kintwined-encrypted-v1, records store: encrypted local vault records and operational state needed to use and recover the requested service. Persists until relevant app deletion/reset or browser site-data removal. It has no fixed browser-enforced expiry. Do not clear your only copy without a usable encrypted backup or trusted recovery route.
Persistent local storage
kintwined-ui-locale-v1 remembers a selected UI language. kintwined-backend-registration-v1 records the backend/account/public-principal binding used for offline registration recognition; it is not a bearer session credential. kintwined-backend-deletion-receipt-v1 supports checking deletion completion and cannot independently read content or start deletion. kintwined-pending-local-invitation preserves a pending invitation across onboarding. These persist until overwritten/removed by their app workflows or browser site-data clearing; they are not all governed by a fixed timer. The final product must classify each item’s necessity and storage purpose rather than assume a blanket exemption.
Session storage and temporary capabilities
kintwined-backend-pending-v1 and kintwined-storage-connect-v1 preserve pending authorization transactions in sessionStorage, with application expiry checks and workflow cleanup. Browser tab/session behavior can vary. Web account bearer credentials remain in memory. Media preview uses scoped, revocable temporary service-worker messaging, not a claim that stories are stored in a public cache. Native device keychain/database storage is described separately in the Privacy Notice.
Third-party checkout, identity and delivery
Web purchases are disabled, and there is no Stripe checkout. External sign-in/model/update providers may use separate cookies, storage and request metadata. Exact names, domains, purposes, recipients, lifetimes and pre-consent behavior for the release must be observed, including Apple/Google sign-in redirects. No unobserved third-party cookie name or lifetime is invented here.
Choices and release requirement
You can manage site data through browser settings, though removing it can destroy unsynced content/recovery access and disrupt sign-in. A required storage exemption must be assessed item by item. Any non-exempt storage/access needs the applicable notice and consent treatment before use; no banner can retroactively fix an unlawful script load. Add an accessible preferences/withdrawal route if necessary. No GPC response handler is implemented; legacy DNT does not change app behavior. There is no planned sale or cross-context advertising sharing. Qualify applicable opt-out signal duties before adding trackers. Contact privacy@lostmeteor.com.