Cookie Settings

Necessary storage

Sign-in tokens, OAuth security checks, Django session/CSRF cookies and your cookie choice support service and security functions. Our access token cookie normally lasts one hour, refresh token cookie 30 days, and OAuth checks 10 minutes. The preference lasts 180 days; it contains a versioned choice, not a visitor identifier. Hosted sign-in providers use their own cookies.

Requested offline features use account-scoped browser databases for trips, observations, GPS points and feedback waiting to sync. Logout clears that account’s offline database records. Browser session storage remembers the offline account context; an idempotency key helps safely retry trip requests. Older form caches and viewed map tiles can remain separately. You can clear site storage through your browser, but this may remove unsynced work and sign you out.

Optional campaign attribution

Only after acceptance, fathom_marketing_attribution stores signed first/last campaign details for 30 days from its latest permitted refresh. A Django session identifier can link permitted visits and conversions. Without consent, campaign links still work but do not record a scan, create a tracking session or set attribution. On the landing page, its public campaign code can be used if you accept there; no visitor ID is created before acceptance.

Rejecting or changing your choice removes the attribution cookie and disables future attribution use. It does not erase past server records or necessary login sessions. Global Privacy Control overrides optional tracking. Product-email permission is a separate choice.

Maps and other requests

Public previews load OpenStreetMap tiles when visible. Product maps may use NOAA chart tiles. Tile requests disclose normal network metadata and the viewed map area to those providers, whether or not optional campaign cookies are allowed. Necessary map delivery and browser caching are separate from campaign tracking. No advertising or third-party analytics SDK is configured.