Cookies & Browser Storage

Effective October 12, 2026 · Version 2026-10-12-1
Operated by Dodec Consulting LLC

backrow. uses browser storage to keep you signed in and protect work in progress. Security providers may also use cookies. Here is what the current site uses, when outside media connects, and how to make your choices.

At a Glance

Here is what to know before you share. The sections below explain the details and your choices.

• Sign-in storage and security cookies help provide and protect member access.
• Drafts stay in this tab’s session storage and are removed after successful submission or logout.
• Your selected Location and enabled device-badge preference can stay in local storage until cleared.
• No advertising pixels or third-party audience analytics are included in the current backrow. app.
• Every outside-media preview needs its own click. Closing it removes the embedded view.

Cookies Are Not the Only Browser Storage

Cookies are small values a browser can send with requests. Local storage stays on the device across visits. Session storage belongs to a browser tab and can survive a reload; closing the tab normally clears it, although browser session restoration can restore it. Browser caching also keeps site assets for loading.

backrow.’s sign-in implementation uses Supabase local storage rather than an app-set sign-in cookie. Rejecting or clearing browser storage may sign you out, remove drafts, or prevent features from working. Clearing browser information is not a request to delete your server account.

What the Current Site Stores

Sign-In · Supabase · Local storage named sb-…-auth-token stores the session needed for member access. It persists across visits until logout, session invalidation, or browser clearing. Supabase controls session validity; a stored value is not permission to bypass current membership checks.

Security · Cloudflare on Supabase requests · The __cf_bm cookie helps distinguish automated traffic and protect the data service. It was observed on the supabase.co domain. Cloudflare documents expiry after 30 minutes of continuous inactivity. Browser settings may block it. It is a security cookie, not an advertising cookie.

Draft Recovery · backrow. · Session storage named backrow:community-draft:… and backrow:event-draft:… preserves unfinished messages, replies, profile edits, resources, listings, and event forms. A successful save or send removes the matching submitted draft. Logout clears private draft namespaces. Newer edits are preserved when an earlier save finishes.

Navigation · backrow. · backrow:community-context keeps a tab’s community context in session storage. backrow:preferred-location:… keeps your selected Location in local storage across visits. These are navigation preferences, not access permissions. The persistent Location preference remains until replaced or browser storage is cleared.

Password Recovery · backrow. · backrow:password-recovery is a session-storage marker for the recovery flow. It is valid for up to 15 minutes and is removed when recovery finishes or you log out. It does not store your password.

Device Badges · backrow. · backrow:app-badge:… is a local-storage preference written when you enable supported app badges. Disabling badges removes this saved preference. It can otherwise remain until you clear browser storage. This does not enable an advertising tracker or enroll you in email updates.

Outside Media Is Your Choice

Resource previews do not contact the media host until you choose Preview. The notice beside that button names the actual embed host, which can differ from the submitted link. backrow. uses locally uploaded preview graphics, not automatic remote thumbnails.

A preview can connect to YouTube’s privacy-enhanced player, Vimeo, Spotify, Google Docs, or the host of a linked file. That provider receives connection information such as your IP address and may use cookies, local storage, or an existing provider session. Privacy-enhanced YouTube is not a promise that no information is processed.

Choose Close Preview to unload that view. This stops the embedded view but does not erase information already received or cookies already set by its provider. Reloading requires another choice to preview. Open Resource visits the external service directly. backrow. does not save an allow-all media preference or load every provider because you opened one preview.

Manage Storage & Shared Devices

Log out when you finish on a shared device. This removes the local sign-in session and private drafts. To remove persistent preferences or provider cookies, use your browser’s website-data controls for backrow. and the relevant provider domains. Do not clear them while you have an unfinished draft you want to keep.

You can block third-party cookies in your browser and leave resource previews closed. Some previews or security checks may not work when their storage is blocked. Notification Settings lets you disable device badges and separately choose whether to receive weekly emails.

The current app has no analytics or advertising categories to enable, so there is no Accept All tracking banner. Necessary service storage is explained here, and outside media stays behind its own informed click. Adding optional analytics, advertising, or different provider behavior would require a fresh review and appropriate choices before it loads.

Contact the Operator

For agreement questions, privacy requests, copyright concerns, account closure, or review of a moderation decision, contact Dodec Consulting LLC at sam@dodec.org. Include the relevant URL where possible. Do not email passwords or highly sensitive records.