Cookie and storage policy

• Supabase authentication cookies (names beginning sb- and ending -auth-token) keep you signed in and isolate account data. They expire or refresh with the authentication session.
• madreiga.privacy-consent.v1 in localStorage records this browser's category choices, consent version, and change time until browser data is cleared.
• madreiga_private_cache_clear is a short-lived cookie used to clear account-specific caches safely after sign-out or account changes.
• Checkout, authentication-return, service-worker, query-cache, and navigation state may be stored temporarily to complete a request, prevent duplicate operations, restore the active screen, or keep private offline data separated by account.

When you choose a setting, Madreiga can store interface language (NEXT_LOCALE), theme, reader layout and typography, audio/commentary choices, home layout, recent searches, last screen, dismissed notices, saved offline chapters, guest nusach, calendar display, learning types, and reading progress in cookies, localStorage, sessionStorage, Cache Storage, or IndexedDB. These values stay on the device until their feature clears them or you clear site data. Turning off optional preference storage does not erase account settings stored in Supabase; storage needed to carry out a setting you expressly request may still be used.

• Madreiga product analytics uses md-device-token in localStorage and md-analytics-attr in sessionStorage, plus event metadata sent to Madreiga. Raw events are scheduled for deletion after 180 days.
• Madreiga Web Vitals and Vercel Analytics/Speed Insights, when configured, receive performance and request metadata. Madreiga Web Vitals are scheduled for deletion after 90 days; provider retention is governed by the provider's terms.

Google Ad Manager on the web or Google AdMob in a native app loads only after advertising consent and only when you choose the rewarded-ad feature. Google may use cookies or device identifiers such as __gads, __gpi, __eoi, FCCDCF, or FCNEC where permitted. Availability and duration are controlled by Google; withdrawal prevents future loading but cannot remove third-party storage from Google's domain.

Accept all enables preferences, analytics, and marketing. Reject non-essential leaves optional categories off. Manage preferences lets you choose categories without pre-selected options. Browser controls can also clear stored data, but blocking necessary storage can prevent sign-in, checkout, offline reading, or saved settings from working. Global Privacy Control disables marketing consent on supported browsers.