Cookies

This website

No cookies are set. There is no analytics, no tracking pixel, no advertising, no session recording and no third-party script of any kind on these pages. That is also why you haven’t been asked to accept anything — there is nothing to consent to, so a banner would be theatre.

One thing does leave your browser when you load a page here: the fonts. This site uses Sora and DM Sans, served by Google Fonts, so that it matches the app. Requesting them tells Google’s servers your IP address and browser headers, as any request to any server does. No information about you is passed to them by us, and the fonts set no cookies.

That is the complete list of what happens when you visit this site.

The app

The app is different, because it has to remember things — but what it remembers stays on your phone.

Stored on your device

• localStorage — your inventory, bundles, sales log, price check history, activity log, categories, conditions and all your settings and display preferences.
• IndexedDB — your item photos, up to six per item.

This is your data, held on your own device so the app can work — including offline. It is not sent to us and we cannot read it. The privacy page lists it in detail.

Signing in

• A session token from Supabase, our sign-in provider, so that you stay signed in between visits and don’t have to enter your password every time. This is strictly necessary for the app to function.

Loaded from elsewhere

• Google Fonts — the same two fonts as this site.
• jsDelivr — a CDN that serves the Supabase sign-in library.
• Google Identity Services — only involved if you connect Google Drive backup.
• Google Forms — only loaded if you open the bug report from Settings, and only then.

Each of these receives your IP address and browser headers because your browser has to ask them for something. None of them receives your app data.

What is not there

To be specific, because “we respect your privacy” is worth nothing without a list. Not present in the app or on this site: analytics of any kind, tracking pixels, session recording, advertising SDKs, crash and error reporting services, A/B testing tools, and customer chat widgets.

Controlling any of this

You can clear site data from your browser settings at any time. Be careful with the app, though: clearing the app’s browser data deletes your inventory permanently, because that is where it lives and we do not hold a copy. Export a backup first, from Settings → Data & Backup.

If this changes

If analytics or any other tracking is ever added to this site or to the app, this page will say so before it goes live, and a consent banner will appear where the law requires one.

Questions: support@madhaul.app.