What we store on your device
Cookie Policy
Chimesong uses cookies for sessions, request security, consent, and guest fair-use limits, plus browser storage for preferences, local interaction state, and — if you use Chimesong as a guest — your entries. PostHog EU Cloud is used only for optional analytics, not advertising. Analytics stays off unless a valid choice enables it.
Session and request-security cookies
| Name | Purpose | Duration |
|---|---|---|
sb-*-auth-token and possible numbered chunks | Supabase sign-in session and refresh information. | Managed by the Auth client and session configuration; a token's lifetime is not the cookie's lifetime. |
sb-*-auth-token-code-verifier | Temporary verifier during PKCE sign-in or account recovery. | Auth-flow managed; cleared after use where supported. |
cs-csrf | Protect state-changing requests against cross-site request forgery. | Up to 30 days; can be renewed by requests. |
cs_consent_v1 | Your optional analytics choice. | One year from the latest saved choice. |
cs-local-ai | Guest (Local Mode) only: an HTTP-only random device token that keeps the free guest Chime allowance fair. The server keeps only keyed hashes derived from it and from your network IP address, plus the time and outcome of each request — never your writing. | Up to 7 days. |
Clearing session cookies signs you out. Essential authentication and security continue to work when you reject optional analytics.
Guest (Local Mode) history
If you use Chimesong without an account, your entries and Chimes are saved only in this browser, in an IndexedDB database named chimesong-local. Chimesong's servers do not keep a copy. It persists until you clear this site's data; clearing it deletes your guest history permanently, and Chimesong cannot recover it. Creating an account does not upload it automatically. See the Privacy Policy for what is sent to produce a Chime.
Saved preferences and local interaction state
These localStorage values persist until cleared by the app or your browser; they have no general automatic expiry:
themeandchimesong:experience-preferences:v1: theme, motion, sound, haptics, Quiet Sky, and performance preferences.- Legacy sensory settings may still be read during migration:
chimesong:sound,cs-sfx-enabled,cs-haptics-enabled,chimesong:quiet-sky, andchimesong:low-performance. cs-onboarding-seen: acknowledgement of onboarding.cs-retro-modeandcs-retro-mode-unlocked: an optional visual preference and its availability.chimesong:momentsPanel:openandchime-cascade-swipe-hint-shown: Moments expansion and Chime Cascade hint preferences.chimesong-daily-YYYY-MM-DD: unfinished daily-game guesses and feedback, cleared on successful completion where possible. This does not make Chimesong an offline app.chimesong:rate-draft:v1:<account or "local">:<date>: your in-progress Rate reflection for the day, so it survives a refresh. It never leaves your device, and it is cleared when you submit, when a new day begins, and when you sign out.chimesong:notebook:v1andchimesong:notebook-writing-font:v1: the notebook and handwriting you chose.cs_intro_v1: that you have seen or skipped the first-visit welcome, so it does not show again.chimesong:updates:last-seen: the latest What's New entry you have seen.sidebar-collapsed: whether the desktop sidebar is collapsed.- Game saves and tutorial flags:
chimesong:kinetic-gomoku:v1:*,chimesong:chime-cascade:gravishift:*, andchimesong:fluxfield:preferences.
One sessionStorage value, cs_splash_v1, records that the launch animation has played in this browser session; it is removed when the session ends.
A development-only region override, cs-debug-geo, may be present in a manually configured test browser. Normal consent controls do not create it.
With analytics consent, PostHog also uses localStorage for pseudonymous browser and session identifiers. This is browser storage, not an additional PostHog analytics cookie. These are not Chimesong account IDs. Withdrawing consent opts out of capture and resets those identifiers and storage where supported.
An analytics opt-in saved before PostHog was introduced does not enable PostHog. A fresh choice under this notice is required.
Optional analytics
With analytics consent, PostHog receives coarse page visits and occurrence-only events for the signup and reflection funnel, History visits, and voluntary Public Echo sharing. This helps Chimesong understand traffic and aggregate product use. Chimesong does not intentionally send reflection text or other user-generated content, email addresses, Chimesong account IDs, post identifiers, URL queries, or fragments to PostHog. The analytics browser identifier is pseudonymous, not anonymous. PostHog's browser requests necessarily expose technical connection information, including the network IP address, to its EU Cloud service. Chimesong disables GeoIP enrichment in event configuration; the PostHog project-level setting to discard raw client IP data must be enabled before production analytics is activated.
Browser performance measurements may still be sent to Chimesong's own telemetry endpoint, which acknowledges and discards them. PostHog page visits are captured explicitly, not through automatic page-view tracking. No Google Analytics, advertising pixel, or marketing subscription is enabled. Marketing consent is not requested for a nonexistent feature.
A regional banner can offer a choice, but its timezone-based region hint is not legal geolocation verification. Analytics stays off everywhere without valid consent, whether or not a banner appears.
Withdraw or change consent
Use Manage cookies here, in the landing footer, or in Settings. Choose Essential only to withdraw analytics consent. Analytics capture rechecks the current choice, stops on withdrawal, and resets PostHog's browser identity and storage where supported. Changes are shared with open tabs where the browser supports BroadcastChannel and rechecked when a tab regains focus. Essential sign-in and security cookies are unchanged.
A browser Global Privacy Control signal forces optional analytics off, including when an older cookie allowed it. An earlier opt-in is not restored automatically after that override. Already-sent requests cannot be recalled.
Security fingerprinting is different from advertising
Chimesong uses hashed IP/browser evidence for consent and browser/region-derived fingerprints for account security. It would be inaccurate to say that no fingerprinting occurs. These security records are described in the Privacy Policy; they are not cross-site advertising profiles.
Clear site data
Your browser can delete cookies and localStorage separately. Clearing only cookies does not necessarily remove your saved theme or local game state. Removing all site data resets these browser preferences and permanently deletes any guest (Local Mode) history, but it does not delete your server-side account or entries; use Settings for account deletion.
Questions: klarkkrampus@gmail.com.