Cookies and local storage

Cookies and local storage

Draft for legal and operational review. Not approved for public launch.

This page lists what Teddy’s Future Lab keeps in your browser, based on a review of the app’s own code. The app does not use advertising cookies, analytics or tracking cookies, or third-party cookies.

The one cookie: staying signed in

tfl_session — a strictly necessary cookie that keeps you signed in. It is set only when you sign in, holds a random session code (not your password), can only be read by the server (it is marked HttpOnly and SameSite=Lax, and Secure on HTTPS), and lasts up to 30 days. It is removed when you sign out. Without it, sign-in cannot work.

Browser storage on your device

The app also uses your browser’s local storage, session storage, IndexedDB and offline cache. These stay on your device; they are not cookies and are not sent to us automatically. They are used for:

You can remove all of this at any time by clearing this site’s data in your browser settings. Doing so signs you out and resets these preferences on that device; it does not delete your account.

See also: Privacy · Contact · Accessibility