Cookie Policy
A short, plain-English summary of the cookies and similar technologies AVTDB uses.
Last updated: 2026-05-17
2. Strictly necessary
These keep the service running. They cannot be disabled without breaking sign-in or core security features. We do not need your consent to load them.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token | AVTDB | Keeps you signed in across pages | Session (deleted on sign-out) |
| next-auth.csrf-token | AVTDB | Protects against cross-site request forgery on auth endpoints | Session |
| avtdb-cookie-consent | AVTDB | Remembers your cookie banner choice (stored in localStorage) | Until you clear browser storage |
3. Functional
We don’t currently set any functional cookies (cookies that remember non-essential preferences like UI tweaks). If we add any, this section will be updated and existing users will be notified.
4. Analytics
We don’t currently set any analytics cookies. Vercel Speed Insights is enabled for performance measurement; it operates without cookies and does not track individual users.
If we add analytics in the future (for example, a privacy-friendly product analytics tool), we will list it here, surface a cookie banner to capture consent, and load the analytics script only after you accept.
5. Marketing
We do not currently use marketing or advertising cookies. If that ever changes, you will see a banner asking for consent before any such cookie is loaded.
6. Third-party cookies
Some pages embed third-party services that may set their own cookies under their own privacy policies:
- Stripe — sets cookies on payment pages to detect fraud and operate Checkout. See stripe.com/privacy.
- Google — Maps / Places autocomplete may set cookies on pages that use them. See policies.google.com/privacy.
7. How to control cookies
You can block or delete cookies through your browser settings — most browsers let you clear cookies on demand or refuse third-party cookies entirely. Disabling strictly-necessary cookies will prevent you from signing in.
We honor the Global Privacy Control (GPC) signal where required: when GPC is detected, we treat it as an opt-out of any sale or sharing of personal information (we don’t do either, but the signal is respected as a valid opt-out anyway).
8. Updates
We may update this policy as we add or remove features. The “Last updated” date at the top always reflects the current version. For material changes — adding analytics or third-party tracking for the first time, for example — we will notify users before the change takes effect.
9. Contact
Questions? Email privacy@avtdb.com. See also our Privacy Policy.
