Legal
Cookies and local storage
Last updated 2 September 2026
Factual, not legal advice
This page describes how the system actually behaves today. It is accurate as a description and is not a legal declaration.
There is no cookie banner on this site, and that is a deliberate result rather than an omission. Consent is required for storage that is not strictly necessary to provide the service you asked for. We set none, so there is nothing to ask you about.
What is stored
Everything this site stores in your browser is strictly necessary:
- Authentication cookies (names beginning sb-), set by Supabase Auth. They keep you signed in. They are httpOnly, so no script on the page can read them — which means a scripting vulnerability could not walk off with the handle to your health case.
- anovena.caseId in local storage: the identifier of the case you are working on, so that reloading the page returns you to it rather than losing your progress.
What is not stored
No analytics, no advertising or tracking cookies, no third-party pixels, no cross-site identifiers, no fingerprinting. Nothing is shared with anyone for their own purposes.
When this page changes
The Tech Paper anticipates privacy-friendly analytics and error monitoring later. Even consent-free tooling changes what is stored, so anything added must appear here first — and anything that is not strictly necessary must be behind a real consent choice, with rejecting it as easy as accepting it. Adding a banner that asks permission for cookies we do not set would be theatre, not compliance.
Clearing what is stored
Signing out clears the authentication cookies. Clearing site data in your browser removes everything above. Neither deletes your account or your cases — for that, see the privacy notice.