MediaLog legal
Cookie Policy
Last updated September 27, 2026
MediaLog does not currently use analytics, advertising, or behavioural-tracking cookies. This policy explains the essential browser storage needed for secure sign-in and reliable operation.
1. Cookies and Similar Technologies
Cookies are small text files a website can store through your browser. Similar technologies include local storage and session storage. MediaLog's current application uses essential local storage rather than first-party analytics or advertising cookies.
2. Current Storage Inventory
| Name | Type | Purpose | Duration and control |
|---|---|---|---|
sb-<project>-auth-token | Essential local storage | Maintains your Supabase-authenticated MediaLog session across page loads | Until sign-out, expiry, or clearing MediaLog site data |
medialog:auth-next-request-at | Essential local storage | Prevents repeated magic-link requests while email delivery is rate limited | Contains only an expiry timestamp; ignored after the displayed wait period |
| Cloudflare Turnstile challenge | Essential security technology | Distinguishes legitimate sign-in requests from automated abuse | Challenge tokens are single-use and expire after about five minutes |
medialog_msp_oauth_state and medialog_msp_pkce_verifier | Essential administrator cookies | Protect the one-time MySpeedPuzzling catalogue authorization against request forgery and intercepted authorization codes | HttpOnly, used only by the configured administrator, and expires after ten minutes |
Essential storage and security technology are required for the sign-in service you request and for abuse prevention. Blocking them can prevent login or cause repeated sign-in prompts.
3. Technologies We Do Not Use
MediaLog currently has no Google Analytics, advertising pixels, retargeting, cross-site behavioural advertising, payment cookies, or social-media tracking widgets. Because no non-essential storage is set by MediaLog, it does not currently display a consent banner. If analytics or marketing technology is added, this inventory and the consent experience will be updated before that technology is enabled where consent is required.
4. External Media Requests
Cover art and avatars can be loaded directly from Supabase Storage and third-party media hosts associated with TMDb, IGDB/Twitch, Spotify, MusicBrainz/Cover Art Archive, Open Library, Google Books, Internet Archive, optional ISBNdb, AniList, YouTube, Podcast Index, BoardGameGeek, TheAudioDB, The Met, Art Institute of Chicago, Getty Museum, Smithsonian Open Access, Wikimedia Commons, Historypin, OpenStreetMap, and optional Foursquare Places, Rebrickable, MySpeedPuzzling, UPCitemdb, and AmiiboAPI. A signed-in Places search can also load a temporary photo from Google Maps Platform when configured. When your browser requests an image, that host receives the IP address, user agent, referrer information permitted by the browser, and image URL. A third party may apply its own storage practices, which MediaLog does not control.
5. Your Controls
- Use MediaLog's Sign out button to end the local authenticated session.
- Use your browser's site-data controls to clear MediaLog local storage.
- Use browser privacy controls to restrict third-party requests or storage.
- Private or incognito mode generally removes local site data when that session closes.
Browser Do Not Track and Global Privacy Control signals do not alter essential authentication storage. MediaLog does not sell or share personal information for behavioural advertising, so there is no sale or advertising profile to opt out of.
6. Updates and Contact
This policy will be updated when storage practices change. Questions may be sent to privacy@media-log.ca. See the full Privacy Policy for data-processing details and rights.