Cookies & browser storage
Draft for review · Updated 23 September 2026
Pre-launch draft, not a final legal notice. Cleo’s operator identity and contact details, service providers, and data-retention arrangements must be confirmed before launch. This document describes the current prototype, not a production service.
Cookies and local or session storage can keep information on your device. This inventory is based on the application code, not a completed audit of every deployment or hosting provider.
The waitlist page
The waitlist form does not save its email field in a cookie or browser storage. It creates a draft in your email application when you submit it. No advertising or analytics tracker was identified in the reviewed application source; hosting integrations and runtime diagnostics still need a deployment audit.
Sidebar preference cookie
sidebar_state is written when you toggle the desktop app sidebar. It contains the open/closed preference and is configured to expire after seven days. It is not written by the landing-page form. The final deployment must review whether persistent preferences require consent in the locations served.
Prototype sign-in storage
spc:session:v1 in local storage holds the mock sign-in session and user details. The session is valid for seven days, but the stored entry has no automatic deletion. Signing out or clearing site data removes it. spc:dev-otp:v1 in session storage holds the temporary development sign-in code and email. It is removed after successful verification, and session storage normally ends with the tab’s session.
Study data stored locally
spc:mock-db:v2 stores the demo study database, including user-entered prototype records. studycoach_myday_pinned stores pinned task identifiers and studycoach_myday_focus_minutes stores focus-minute totals. These local-storage entries have no automatic expiry in the reviewed code and remain until removed or cleared through browser settings.
External requests
The site requests fonts from Google Fonts. That is a third-party network request, not proof that no information leaves your device. Review the final hosting setup and all third-party services before publishing a complete cookie inventory.
Your controls
You can inspect, block, or clear site data in your browser’s privacy settings. Clearing it can sign you out and permanently erase local prototype entries. The site does not currently offer optional tracking categories, so it does not show an ‘accept all’ banner that would imply choices it cannot enforce.
If optional tracking is added, applicable consent and withdrawal controls must be implemented before it runs. This draft must then be updated with each technology’s purpose, provider, and lifetime.