Index Studio / Policies
Cookie Policy
The browser storage used by the current Index Studio application, and your choices.
Draft updated 4 November 2026 · Effective date pending approval
Review draft — awaiting approval by the adult business operator and qualified legal counsel. Sales are not open. This is not a statement of guaranteed legal compliance.
01Current tracking setup
The application currently uses local storage and session storage for essential account and browsing functions. No first-party analytics or advertising tracker is configured. We have not implemented a cookie-consent manager and do not claim that consent has been collected for nonessential tracking.
Before enabling nonessential analytics or marketing storage, we must assess consent requirements and implement any necessary choice mechanism. Hosting and third-party services may use their own security mechanisms as described below.
02Authentication storage
Supabase Auth persists the login session in browser local storage so your session can be restored after refresh. Authentication may also use temporary authorization-code verification state during sign-in. These values can contain sensitive session credentials; do not share them.
Signing out clears the active local session through the authentication client. A safe return destination is temporarily stored under “index.auth.return” in session storage and consumed by the callback flow. Session storage normally lasts until the tab or browser session ends.
03Cart and invitation preferences
“index-studio.cart.v1” stores product identifiers in local storage. It does not establish authoritative prices or paid access. The cart persists across visits until cleared or normalized against available products.
“index.invite.dismissed” stores the time you dismissed the optional sign-in invitation. The application respects that dismissal for 30 days; the stored timestamp may remain afterward until replaced or cleared. Browsing engagement used to show the invitation is held in application memory.
04External services
Google sign-in takes you through Google and Supabase authentication pages. Google may use cookies on its own services. Resend sends subscription confirmation messages; newsletter confirmation links use a one-time token and unsubscribe links allow you to stop updates. Open and click tracking are disabled on the verified sending domain. Website fonts are hosted with the application; the current font setup does not send requests to Google Fonts.
Vercel and Supabase may process technical and security information needed to provide their services. Provider behavior can change; this policy does not assert that every external service is cookie-free.
05Your controls
You can sign out and use your browser settings to inspect or clear cookies and site storage, or block storage. Clearing storage may sign you out, remove your cart and reset invitation preferences. Blocking essential storage may prevent login or other features from working.
For questions, email indexstudiohq@gmail.com. The Privacy Policy explains broader information handling and rights.