Cookies, Storage and Diagnostics
Read this with the Privacy Policy. We use local storage, cookies and mobile SDKs for authentication, preferences, offline content, operational security and optional measurement.
1. Essential storage
Authentication/session tokens, integrity checks, saved privacy choices and storage needed to deliver a requested feature operate as necessary for that purpose. Website consent choices use local storage; the sale/share preference cookie has a one-year lifetime. Local preferences can remain until cleared. Mobile caches can include private diary records, routes and media: protect your device and clear app data when transferring it.
2. Optional analytics
In the website and app, optional analytics starts off globally until a recorded affirmative choice. Website Google Analytics measures page/device and interaction information. App Firebase Analytics measures enabled app-use events. Website configuration denies advertising storage and ad personalisation and disables Google signals. Analytics remains optional; this notice does not claim an independent tracking certification.
Use Cookie preferences on this website or the app's data/privacy settings to change optional analytics choices. The app functional-preferences flag currently does not independently control additional optional SDK behaviour. We do not claim that every SDK is controlled by either toggle.
3. Diagnostics and uptime monitoring
Firebase Crashlytics and Google operational logs support error/security investigation. Sentry is disabled in the new beta app; older versions may have sent error, session or performance reports. Firebase Crashlytics collection follows the app analytics choice; restart after withdrawing that choice. Better Stack supports uptime and incident monitoring; it is used for monitored service availability and incident status.
Diagnostic data can include device identifiers, requests, errors and contextual breadcrumbs. Diagnostic records are limited to operational needs and relevant provider retention/deletion cycles; optional collection is not treated as essential merely because it helps debugging.
4. Other requests
Maps, place search, media delivery, sign-in, push, product lookup and external links can disclose IP/device/request information to their providers. Website fonts are served locally. Resend handles emails and delivery records; open/click tracking depends on the sending configuration and requires an appropriate legal basis. The Provider Register lists the relevant services.
5. Browser privacy signals and advertising
We do not sell personal data or use it for cross-context behavioural advertising. The current website detects the browser's JavaScript Global Privacy Control signal and records a sale/share opt-out. That flag does not by itself override a previously saved analytics choice; use Cookie preferences to reject analytics. This notice makes no claim that the server processes every Sec-GPC header. Browser or device privacy settings provide additional controls.
6. Retention and changes
Cookies, local app records and provider data have different lifetimes. Clearing browser storage may reset your local preferences; make your choices on each device. We do not claim unverified 14-month analytics or universal 30-day log retention. See the Privacy Policy for criteria and deletion. Material changes follow its notice process. Contact legal@socialgryd.com.
