BLOCKCookies & storage
Effective October 10, 2026
You can browse without accepting optional storage or analytics. Cookie settings offers separate choices for display preferences and Umami analytics; both start off. Save only the choices you want, or reject all. An additional Google advertising choice appears on eligible public catalog pages. It is off until you request it; Google then manages its own consent message before any permitted ad request. Rejecting either purpose does not prevent browsing or downloading. Connection data, security records, and aggregate usage counts are handled separately, as described in the privacy policy.
Downloads use a short-lived ticket sent in the download URL and server-side quota records. They do not set a download cookie or save a download choice in local or session storage. These security records are required for the requested download and are separate from optional cookie choices. See download data, retention, and your rights.
| Storage | Purpose and choice | Duration |
|---|---|---|
| block-library:privacy:2026-10-03-llc (local storage) | The custom banner remembers your separate display-preference, analytics, and Google advertising-load choices, notice versions, and dates on this device. It is not sent to a third-party consent service. Analytics requires the campaign notice version 2026-10-10-campaigns; earlier analytics grants do not authorize campaign attribution or transfer counts. | 180 days, or until you change the choice. |
| theme, layout (local storage) | Optional display preferences; written and read only after you explicitly allow display preferences. | Until withdrawal or choice expiry on a subsequent visit. |
| accountConsent, accessToken, expires, authMethod, verifier, oauthState, oauthProvider, oauthEnrollmentRetry, authReturn (session storage) | Account permission, login security, selected sign-in provider, registration retry limit, return navigation, and authentication. Created only after account consent. The temporary provider registration handle is not stored here. | Tab session; tokens valid one hour. Login verifier/state are replaced for a registration retry and removed after callback. Provider/retry markers are removed when sign-in finishes or fails. |
| uploads:<account identifier> (session storage) | Owner-private upload progress, after account and upload consent. | Tab session or sign-out/withdrawal. |
| Umami analytics (page memory; no analytics cookies) | Optional public-page and completed-transfer counts with approved campaign labels, only after your separate analytics choice. The tracker can keep visit state in memory. This integration does not write analytics identifiers to local or session storage; the vendor tracker can read its own browser opt-out flag, umami.disabled, if you have set it. | Page memory ends when the page unloads; provider records have separate retention below. |
| block-library:campaign:2026-10-10 (session storage) | An approved campaign label and expiry, only after analytics consent; no visitor identifier. Retains attribution between public pages in this tab. | Up to 30 minutes, tab close, withdrawal, or an excluded page, whichever comes first. Expired storage is removed on the next analytics check. |
| Google consent and advertising storage | Only after you request Google advertising choices. Google manages its consent record. Ad requests remain paused until the separate Google consent requirements and publisher approval are satisfied. Non-personalized ads can still use cookies for reporting, frequency limits, and fraud prevention. | Provider-controlled expiry; see Google cookie information and the consent message. |
| Cognito and chosen identity-provider cookies | Login/session/security on their domains, when you choose sign-in. | Provider-controlled expiry. Manage through the provider or browser settings. |
Your browser may cache public files as part of delivering pages. Private API responses use no-store. The table above lists this site's browser storage; the custom banner keeps its choices locally. Only requesting Google advertising choices loads the separate Google consent service; that service has its own records.
Optional analytics connections
After analytics consent, your browser contacts cloud.umami.is for the script and gateway.umami.is for public-page and completed-transfer collection. The requests expose network information to Umami even though its standard tracker is cookie-free. We send fixed public-page categories and approved campaign labels and omit search terms, referring URLs, account identifiers, and submitted content. Do Not Track and Global Privacy Control prevent analytics requests. See analytics data, recipients, provider retention, and rights; provider retention is separate from the lifetime of the browser choice.
Optional Google connections
Requesting Google advertising choices loads Google software, which receives connection/device information and can read existing Google cookies while ads are paused. Our site-origin referrer contains no path or query. Google manages the separate advertising consent decision. Withdrawal unloads the software through a page reload. See advertising data, choices, and provider retention.
Open Cookie settings to reject or change optional choices. Withdrawing analytics stops future requests. Withdrawing display preferences removes optional theme and layout values. See the privacy policy for server data and rights.