Cookies and storage
Last updated: September 2026
Trooday stores as little as possible. Essential storage is required for the site to work at all. Everything else is optional, switched off by default, and only starts after you allow it.
Essential storage
This storage is always active and has no on/off switch. It is first-party and is not used for advertising or profiling.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Supabase session (sb-…-auth-token) | Local storage | Keeps you signed in and lets Trooday read your saved checks, helpfulness responses and Ask requests as you. | Until you sign out or clear browser storage |
| Supabase sign-in and recovery state | Local storage | Completes Google sign-in and password recovery securely (PKCE verification). | A few minutes, during the sign-in or recovery flow |
| trooday.privacy-preferences.v1 | Local storage | Remembers the privacy choice you made on this page. | Until you clear browser storage |
Optional storage
Each category below is off until you allow it, and can be withdrawn at any time.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| trooday.theme | Local storage · Appearance | Remembers whether you chose Light, Dark or System. | Until you withdraw Appearance or clear browser storage |
| trooday.history | Local storage · Local history | Keeps the checks you opened and searches you made on this device. It is never sent to Trooday. | Until you clear it in Settings or withdraw Local history |
| _ga, _ga_… (Google Analytics 4) | Cookie · Analytics | Anonymous page-view measurement through property G-N637LR9Y98. Set only after you allow Analytics. | Up to 2 years, or until you withdraw Analytics |
| _clck (Microsoft Clarity) | First-party cookie · Analytics | Keeps a pseudonymous Clarity identifier for this browser, so repeated page views can be linked to the same session set in project yd4f61w9sl. | 1 year, or until you withdraw Analytics |
| _clsk (Microsoft Clarity) | First-party cookie · Analytics | Connects the page views of a single visit into one Clarity recording. | 1 day, or until you withdraw Analytics |
Analytics
Trooday uses Google Analytics 4 and Microsoft Clarity only with your permission. Until then no Google or Microsoft script is requested, no measurement cookie is set and no request is sent to either provider. Clarity’s cookieless, consent-free mode is not used.
When allowed, Google Analytics measurement is limited to anonymous usage: page paths without query strings, referrer, approximate location, device and browser information. Advertising storage, ad user data, ad personalization and Google signals stay denied, so no advertising or remarketing audience is created.
Microsoft Clarity (project yd4f61w9sl) records privacy-masked session replays and heatmaps of public pages: clicks, scrolling, mouse movement, navigation and general device and browser data, linked to pseudonymous analytics identifiers. Advertising storage stays denied. Clarity is loaded only on public reading pages — never on Settings, Saved, sign-in, password recovery, Ask Trooday request content or administrative pages — and sensitive areas such as sign-in and Ask Trooday are additionally masked.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| CLID | Third-party cookie · clarity.ms | Identifies which Clarity project the recording belongs to. | 1 year |
| ANONCHK | Third-party cookie · c.clarity.ms | Indicates whether the identifier is used for advertising measurement. Trooday keeps advertising storage denied. | 10 minutes |
| MR | Third-party cookie · c.clarity.ms | Indicates whether the Microsoft identifier should be refreshed. | 7 days |
| MUID | Third-party cookie · Microsoft domains | A pseudonymous Microsoft browser identifier used for analytics and site interaction measurement. | 1 year |
| SM | Third-party cookie · Microsoft domains | Synchronizes the identifier across Microsoft domains. | Session |
Trooday never sends your name, email address, password, account identifier, saved checks, helpfulness responses, Ask Trooday text or administrative content to Google or Microsoft. Microsoft’s handling of Clarity data is described in its privacy statement.
Analytics runs on the published trooday.com site only. It is never loaded on preview builds or in administrator pages.
Withdrawing your choice
Use “Open privacy preferences” above, the “Cookie settings” link in the footer, or the Privacy and data section of Settings. Turning Analytics off blocks any further measurement, sends a denied consent signal to Microsoft Clarity, deletes the Google Analytics and Clarity cookies this site can reach, and reloads the page you are on so neither runtime keeps recording. Cookies set on Microsoft’s own domains cannot be deleted by this site; they are covered by the denied consent signal and by Microsoft’s own controls.
Clearing your browser storage also removes these items, including your privacy choice and your signed-in session.
Third-party storage
Trooday does not use advertising networks, marketing pixels, social media trackers, a tag manager or a consent-management vendor. Apart from Google Analytics and Microsoft Clarity when you allow analytics, the only third parties involved are Supabase (authentication, database and file storage), our website hosting provider, and Google if you choose Google sign-in.
Questions about this page can be sent to jointrooday@gmail.com.