Cookie & browser storage policy
Useful features, without built-in advertising trackers or analytics.
Optional interactive maps are off by default. You can choose “Essential only”, allow maps, or save your preferred map setting. Open “Cookie settings” in the footer at any time to change your choice.
What we mean by cookies and storage
Cookies are small pieces of data a service can store in your browser. This app also uses local storage, IndexedDB and a service-worker cache. These are different browser technologies; this policy covers them together so you can understand what remains on your device.
The app does not set its own advertising or analytics cookies. Authentication and external providers may use cookies or browser storage for their services. Choosing essential-only storage does not stop the features you explicitly request, such as signing in, saving a listing or submitting information.
What is stored and for how long
| Feature | Purpose and location | Duration or removal |
|---|---|---|
| Privacy choice | ceres-consent-v1 in local storage remembers whether you allow optional maps, plus the preference version and date. | Valid for 180 days from your saved choice. You can change it sooner or clear site data. |
| Location prompt | ceres-location-dismissed in local storage remembers that you dismissed the startup location invitation. It does not contain your position. | Until site data is cleared. |
| Saved listings | Keys beginning ceres-saved-v1- in local storage keep listing IDs for this browser and the current account or visitor. | Until you unsave them or clear site data. Signing out does not erase every account’s saved list from the device. |
| Local demo session | ceres-demo-user-v1 in local storage remembers the local demonstration profile. It is not a Firebase account. | Until demo sign-out or site data is cleared. |
| Local demo submissions | The ceres-community-demo-v1 IndexedDB database holds test listing details and image files in local demo mode. | Until deleted through the app or site data is cleared. Demo sign-out alone does not delete submissions. |
| Firebase sign-in | When configured, Firebase Authentication may use IndexedDB, local storage and authentication-related cookies to maintain your session. Google sign-in may also use Google’s own cookies. | Managed by Firebase, Google, session expiry, sign-out and browser settings. Provider key names and lifetimes can vary. |
| Offline app cache | Service-worker caches beginning ceres-public- contain app assets and visited public directory pages. They exclude private account/admin/submission pages and uploaded images. | Until replaced by an app update, removed by the browser or cleared in site settings. Offline pages may be stale. |
| Address-search cache | When you request an address lookup, the browser may cache the response. The app server also temporarily caches the query and results in memory. | Up to 24 hours; the server cache also ends when its process stops. |
Optional interactive maps
An embedded OpenStreetMap map is blocked until maps are allowed in your preferences. When you then choose to show a map, OpenStreetMap receives your IP address, normal connection information and the listing’s map coordinates. The provider may use its own storage under its policies. The app does not use the map preference to enable advertising or analytics.
Withdraw permission through “Cookie settings” in the footer. An open embedded map will be removed and future embedded maps will be blocked. Withdrawal does not erase requests already received or data already stored by the provider; use your browser settings for third-party site data.
The app remembers your choice for 180 days and asks again when it expires. If browser storage is blocked, the choice can only apply in the current tab session and the app shows a notice about that limitation.
Location permission and external links
Your browser’s location permission is separate from this preference. Live browsing coordinates stay in memory while the feature is active. The submission form can add a location pin to a listing only when you choose to supply one; approved pins are public.
Opening Google Maps directions, Google sign-in or another external link is a separate action. Address lookup also runs only when you request it. These services have their own privacy and storage practices; the optional map switch controls embedded OpenStreetMap maps.
Managing data in your browser
You can block or clear cookies and site storage in your browser’s privacy settings. Doing so can sign you out, remove bookmarks, delete local demo submissions and images, reset the map/location preferences, and remove offline pages. Clear site data only after saving anything you need from the local demo.
Firebase Authentication maintains the sign-in session; the shared directory uses Supabase for listings and images. The app sends the current Firebase authentication token to Supabase for access checks. It does not create a separate Supabase Auth session or use a Supabase password or email-sign-in service.
Clearing this browser’s data does not delete Firebase accounts, Supabase listings or images, or information already held by another service. See the privacy policy for removal requests and more about providers.