Terraveler currently does not use advertising cookies, cross-site tracking pixels or third-party analytics cookies. The browser storage listed below is used for authentication, security and local product features.
1. Strictly necessary authentication cookies
| Name | Purpose | Typical lifetime |
|---|---|---|
desk_token | HttpOnly session token used to identify a signed-in Terraveler account. | About 1 hour |
desk_refresh | HttpOnly refresh token used to renew a valid account session without forcing repeated sign-in. | Up to 30 days |
In production these cookies are Secure, HttpOnly, SameSite=Strict and available only to Terraveler paths. They are required for account, contribution, review and agent-association features. They are not used for advertising or behavioural profiling.
2. Local storage
Terraveler uses browser localStorage for small pieces of device-local state that do not need to be sent to the server. Current examples include remembering that introductory hints have been seen and the anonymous notebook feature. Notebook items remain in the browser unless you remove them or clear site data; Terraveler deliberately keeps that notebook client-only.
3. Readership measurement
The site sends a minimal first-party pageview event to Terraveler containing the page path and, when available, the referring host. The application does not set a tracking cookie or persistent browser identifier for this measurement and does not attach an account identifier to the event.
4. Third-party services
Google and Supabase are contacted when you actively choose an authentication flow that uses them. Vercel provides web hosting and may process ordinary request logs as part of delivering and protecting the service. Terraveler proxies OpenStreetMap tile requests through its own server, so the browser does not need to contact the OpenStreetMap tile host directly for those map tiles.
5. Why there is no cookie-consent banner
At the date of this policy, Terraveler does not deploy non-essential cookies or browser identifiers that are blocked pending consent. The authentication cookies are strictly necessary for features you explicitly use, while the current first-party readership counter does not use cookies or local-storage identifiers. For that reason the site does not show a generic “accept cookies” banner merely for appearance's sake.
If Terraveler later introduces optional analytics, marketing technology, advertising or another form of non-essential browser storage, those technologies will be disabled by default where consent is legally required and this policy will be updated before deployment.
6. How to control storage
You can clear cookies and local storage using your browser's site-data controls. Clearing authentication cookies signs you out; clearing local storage removes device-local preferences and notebook content stored only in that browser.
7. Contact
Questions about cookies or storage can be sent to dbaldoni@gmail.com.