MediaLog legal
Cookie Policy
Last updated August 20, 2026
MediaLog does not currently use analytics, advertising, or behavioural-tracking cookies. This policy explains the essential browser storage needed for secure sign-in and reliable operation.
1. Cookies and Similar Technologies
Cookies are small text files a website can store through your browser. Similar technologies include local storage and session storage. MediaLog's current application uses essential local storage rather than first-party analytics or advertising cookies.
2. Current Storage Inventory
| Name | Type | Purpose | Duration and control |
|---|---|---|---|
sb-<project>-auth-token | Essential local storage | Maintains your Supabase-authenticated MediaLog session across page loads | Until sign-out, expiry, or clearing MediaLog site data |
medialog:auth-next-request-at | Essential local storage | Prevents repeated magic-link requests while email delivery is rate limited | Contains only an expiry timestamp; ignored after the displayed wait period |
Essential storage is required for the sign-in service you request and for abuse prevention. Blocking it can prevent login or cause repeated sign-in prompts.
3. Technologies We Do Not Use
MediaLog currently has no Google Analytics, advertising pixels, retargeting, cross-site behavioural advertising, payment cookies, or social-media tracking widgets. Because no non-essential storage is set by MediaLog, it does not currently display a consent banner. If analytics or marketing technology is added, this inventory and the consent experience will be updated before that technology is enabled where consent is required.
4. External Media Requests
Cover art and avatars can be loaded directly from Supabase Storage and third-party media hosts associated with TMDb, IGDB/Twitch, Spotify, MusicBrainz/Cover Art Archive, Open Library, AniList, YouTube, BoardGameGeek, and TheAudioDB. When your browser requests an image, that host receives the IP address, user agent, referrer information permitted by the browser, and image URL. A third party may apply its own storage practices, which MediaLog does not control.
5. Your Controls
- Use MediaLog's Sign out button to end the local authenticated session.
- Use your browser's site-data controls to clear MediaLog local storage.
- Use browser privacy controls to restrict third-party requests or storage.
- Private or incognito mode generally removes local site data when that session closes.
Browser Do Not Track and Global Privacy Control signals do not alter essential authentication storage. MediaLog does not sell or share personal information for behavioural advertising, so there is no sale or advertising profile to opt out of.
6. Updates and Contact
This policy will be updated when storage practices change. Questions may be sent to privacy@media-log.ca. See the full Privacy Policy for data-processing details and rights.