Cookie and Device Storage Notice

Session cookie

Better Auth protects sign-in with a Secure, HttpOnly, SameSite=Lax session cookie. The maximum session lifetime is seven days; JavaScript cannot read the cookie, and it is necessary for core account functions.

Preferences

The service keeps selected preferences on your device.

• The wavuna_locale cookie stores the selected language for one year.
• The akinti-theme localStorage entry remembers the light/dark theme in this browser.

Per-tab session storage

sessionStorage values belong to the relevant browser tab/session.

• The akinti:manage: prefix retains live-session management authority for the tab session.
• The wavuna:live-share-prompt: prefix prevents a one-time sharing prompt from repeating in the same session.

Web Push and IndexedDB

When Push is enabled, the browser subscription endpoint is stored on the server. The akinti-push-binding-v1 IndexedDB database stores non-secret binding generation/lifecycle data to prevent cross-account delivery. The service worker does not intercept fetches or build a page cache.

Analytics and third parties

The code audit found no optional analytics, advertising tracker, or marketing cookie, so no consent banner was added for the current necessary/preference storage. Map and Push network requests may reveal technical connection data such as IP address and user-agent to the relevant provider.

Controls

You can clear storage in browser settings; blocking necessary session data may break sign-in and live-session management. If optional tracking is added later, this notice and an appropriate user choice must be updated.