Cookies, analytics, retention, and consent behavior
This page documents how Mythiverse Exchange currently handles essential authentication cookies, optional analytics, consent preferences, and related retention behavior so public policy language matches the live product experience.
Current behavior
Essential authentication
Used to support sign-in, account access, and session continuity through Supabase authentication flows.
Storage: Cookies managed by the authentication stack
Default state: Always active when required for account use
Analytics consent preference
Stores whether a visitor accepted or declined optional analytics so the site can respect that choice on future visits.
Storage: First-party cookie `deckswap_analytics_consent` and browser local storage key `deckswap_analytics_consent`
Default state: Set only after the visitor makes a choice
Optional analytics and performance measurement
Vercel Analytics and Vercel Speed Insights are loaded only after a visitor opts in to optional analytics.
Storage: Loaded only after consent is accepted
Default state: Off by default
Consent flow
On first visit, the site shows a privacy choices banner. Visitors can choose to keep analytics off or allow analytics. Optional analytics do not load unless the visitor explicitly opts in.
After a choice is made, visitors can reopen privacy choices from the floating controls on the site and change that preference later.
Retention of consent
The consent preference is currently stored for up to 180 days using the first-party cookie `deckswap_analytics_consent`. The same accepted or declined preference is also mirrored in browser local storage under the key `deckswap_analytics_consent`.
If these retention periods or storage methods change, the Privacy Policy and this page should be updated at the same time.
Policy alignment notes
- Essential cookies remain active for authentication and account access.
- Optional analytics are off by default and require affirmative consent.
- Visitors can revisit and change analytics preferences after the initial choice.
- Data retention wording in public policies should stay consistent with actual account, listing, and operational retention practices as those are formalized.