Cookies and browser storage
The application uses browser storage for sign-in, email verification and the colour theme you choose. This inventory is based on the current application code; a full deployed-site and supplier audit is still needed.
What the application sets
| Name | Purpose | Duration |
|---|---|---|
lifealign_session | httpOnly sign-in cookie for the app. It is marked Secure in production and uses SameSite=Lax. | Up to 14 days; removed when you sign out. |
lifealign_verification | httpOnly token for verification requests, scoped to the verification API. It is not an advertising identifier. | Up to one hour; cleared on sign-out or a verified sign-in. |
lifealign-theme | Local storage holding the display theme you select. This is not a cookie. | Until cleared or overwritten in that browser. |
Firebase’s client authentication is configured for in-memory persistence. The application does not intentionally keep its client sign-in token in local storage. Google, Microsoft, Firebase and the hosting platform may also use their own technologies during their parts of the service.
Consent and optional technologies
Sign-in and verification storage are used to provide functions you request. The theme preference remembers a display choice you make. The operator must confirm the applicable storage exceptions and provide suitable controls as part of its launch review.
No advertising pixels or third-party behavioural analytics SDKs are configured in this app. A cookie-consent system for additional optional technologies is not currently implemented. Before adding technologies that require consent, they must be blocked until a valid choice is made, with a way to refuse and change that choice. Some storage uses may fall within specific exceptions; this needs an assessment of their actual purpose and operation.
Sign-in statistics are separate
The server records account-linked authentication events and computes aggregate admin statistics. They are not anonymous simply because the dashboard displays totals. The current event recording does not add an analytics cookie. Its purpose, legal basis and retention still need to be documented.
Read about account and activity informationYour controls
Sign out to remove the app’s session and verification cookies. Use the theme controls to change the stored colour choice, or clear this site’s browser data to remove it. Blocking necessary storage can prevent sign-in or verification. Provider account settings control storage and sessions on provider websites.