Cookies and storage
Last updated: September 2026
Trooday stores as little as possible. Essential storage is required for the site to work at all. Everything else is optional, switched off by default, and only starts after you allow it.
Essential storage
This storage is always active and has no on/off switch. It is first-party and is not used for advertising or profiling.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Supabase session (sb-…-auth-token) | Local storage | Keeps you signed in and lets Trooday read your saved checks, helpfulness responses and Ask requests as you. | Until you sign out or clear browser storage |
| Supabase sign-in and recovery state | Local storage | Completes Google sign-in and password recovery securely (PKCE verification). | A few minutes, during the sign-in or recovery flow |
| trooday.privacy-preferences.v1 | Local storage | Remembers the privacy choice you made on this page. | Until you clear browser storage |
Optional storage
Each category below is off until you allow it, and can be withdrawn at any time.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| trooday.theme | Local storage · Appearance | Remembers whether you chose Light, Dark or System. | Until you withdraw Appearance or clear browser storage |
| trooday.history | Local storage · Local history | Keeps the checks you opened and searches you made on this device. It is never sent to Trooday. | Until you clear it in Settings or withdraw Local history |
| _ga, _ga_… (Google Analytics 4) | Cookie · Analytics | Anonymous page-view measurement through property G-N637LR9Y98. Set only after you allow Analytics. | Up to 2 years, or until you withdraw Analytics |
Analytics
Trooday uses Google Analytics 4 only with your permission. Until then no Google script is requested, no measurement cookie is set and no request is sent to Google.
When allowed, measurement is limited to anonymous usage: page paths without query strings, referrer, approximate location, device and browser information. Advertising storage, ad user data, ad personalization and Google signals stay denied, so no advertising or remarketing audience is created. Trooday never sends your name, email address, account identifier, saved checks, helpfulness responses or Ask requests to Google.
Analytics runs on the published trooday.com site only. It is never loaded on preview builds or in administrator pages.
Withdrawing your choice
Use “Open privacy preferences” above, the “Cookie settings” link in the footer, or the Privacy and data section of Settings. Turning Analytics off blocks any further measurement, deletes the Google Analytics cookies for this site and reloads the page you are on so nothing keeps running.
Clearing your browser storage also removes these items, including your privacy choice and your signed-in session.
Third-party storage
Trooday does not use advertising networks, marketing pixels, social media trackers, a tag manager or a consent-management vendor. Apart from Google Analytics when you allow it, the only third parties involved are Supabase (authentication, database and file storage), our website hosting provider, and Google if you choose Google sign-in.
Questions about this page can be sent to jointrooday@gmail.com.