Policy consent-2026-10-v1
Privacy & tracking registry
This is the complete list of what this site stores. Optional analytics runs only after you choose it. Raw IP addresses are never stored: we keep a shortened address and a keyed one-way hash for security. Data is encrypted at rest and readable only by verified administrators, and every administrative read is logged.
Never collected
- passwords
- payment or financial details
- private messages
- health information
- form field contents
- precise location
- government identifiers
Registry
| Name | Type | Category | Purpose | Consent | Recipient | Stored in | Retention | Deletion | Access |
|---|---|---|---|---|---|---|---|---|---|
| fs_consent | local storage | essential | Remember your consent choices so the banner does not reappear | Not required (essential) | None (stays in your browser) | Your browser | 13 months, then you are asked again | Cleared by 'Withdraw all' on /privacy or by clearing site data | Only your browser |
| sb-*-auth-token | local storage | essential | Keep you signed in when you create a GC-22 account | Not required (essential) | Lovable Cloud authentication | Your browser | Until sign-out or session expiry | Removed on sign-out | Only your browser and the auth service |
| fs_sid | session storage | analytics | Random pseudonymous session ID linking page views within one visit | Required | Our own analytics tables | Your browser (tab session) | Ends when the tab closes | Deleted when tab closes or on consent withdrawal | Only your browser |
| First-party analytics (self-hosted) | provider | analytics | Aggregate visit statistics | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| Security event log | provider | essential | Detect abuse: rate-limit hits, failed sign-ins, denied requests | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 180 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| Consent record | data field | essential | Proof of the choice you made and the policy version shown | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 13 months | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| Admin access log | data field | essential | Audit every administrative read of analytics data | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 2 years | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| session_id | data field | analytics | Pseudonymous per-tab random ID (not linked to account) | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| timestamp | data field | analytics | When the page was viewed | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| path | data field | analytics | Page requested (query strings removed) | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| referrer_origin | data field | analytics | Site you came from (domain only) | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| campaign (utm_*) | data field | analytics | Marketing campaign attribution tags | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| browser / os / device | data field | analytics | Coarse family only, e.g. 'Chrome', 'iOS', 'mobile' | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| language | data field | analytics | Preferred language code | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| country / region | data field | analytics | Approximate, derived from IP by the hosting edge | Required | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 90 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| ip_hash | data field | essential | Keyed one-way hash of IP for abuse correlation; raw IP never stored | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 180 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| ip_truncated | data field | essential | IP with last segment removed (e.g. 203.0.113.0) | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 180 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| consent status | data field | essential | Which categories were allowed at the time | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 180 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |
| security_event | data field | essential | Type of security event | Not required (essential) | No third parties | Lovable Cloud database (encrypted at rest, TLS in transit) | 180 days | Automatic daily purge job deletes rows past retention | Server-only; read by verified admins via audited server function |