PearLabs Cookies and browser storage
A code-verified inventory, pending a production browser audit and legal approval.
This is working draft content, not an approved legal document. It cannot take effect until its factual, operational, and authorised-release blockers are closed. Specialist legal review is recommended for unresolved legal judgements, but is not a certification.
- Status
- draft
- Version
- 0.1.0
- Draft updated
- Effective date
- Not effective — approval pending
Locally verified items
| Item | Type | Purpose | Duration |
|---|---|---|---|
| pearlabs-portal-redirect | Cookie | Returns the browser to the requested portal page after magic-link sign-in. HttpOnly, SameSite=Lax, path=/, and Secure in production. | 10 minutes; cleared after use |
| pearlabs-portal:nav-collapsed | Local storage | Remembers whether an authenticated user collapsed the portal navigation. | Until browser storage is cleared |
Authentication cookies
Supabase authentication uses cookies to establish and refresh a signed-in session. Exact production cookie names, count, lifetimes, domains, and attributes must be captured from logged-out and logged-in production sessions before this inventory is approved.
Audit status
This source-code review did not identify other portal-controlled browser storage. That is not a production assurance: hosting, authentication, embedded content, or later integrations may add items that are not visible in this local inventory.
A production browser audit, classification of each item, consent assessment, and re-check after each tracking or embedded-service change remain required.