Cookies

What we store on your device right now

We store one localStorage key, vivari-motion. It remembers whether you asked the site to reduce animation, and it carries no visitor ID, no fingerprint, and no cross-site identifier. When we ship a consent banner, a second key will join it (vivari-consent), holding only the choice you make in that banner (accept, reject, or your per-category picks), so we don't ask you the same question on every visit.

Cookies vs. localStorage: same law, different drawer

A cookie and a localStorage entry are both small pieces of information a site asks your browser to hold. Privacy law (the ePrivacy rules that sit alongside GDPR) treats the act of writing to either one the same way: it requires consent, unless what's being stored is strictly necessary for something you explicitly asked the site to do. Remembering your own motion preference qualifies as strictly necessary. It exists because you set it, and it does nothing without your action. That is why no consent is needed for that one key, and why a tracking cookie would need your yes first.

Vercel Web Analytics: measurement without tracking

We use Vercel Web Analytics to see which pages get read and which buttons get pressed (events like a completed early-access signup, a Stranger Test completion, or a hero button click). It sets no cookie, reads nothing already on your device, and identifies visits with an anonymized hash that rotates every day, so no persistent ID follows you between visits. Because it never touches your device's storage, the cookie-consent rule doesn't apply to it; it only requires disclosure, which is what this page and our security page are for.

Not active yet: analytics that would ask first

We're evaluating two additional tools for later. Neither is running today, and neither will run for anyone until a consent banner asks, with a reject button exactly as easy to press as accept.

While a tool is marked "Not active", its script is not loaded and nothing is measured under these names. If that changes, the consent banner described below asks before anything loads.

What consent will look like when it matters

The day GA4 or Clarity go live, a banner appears with "Accept" and "Reject" as buttons of equal size and weight. Nothing analytics-adjacent loads before you choose, EU visitors see Google's Consent Mode default to denied until you grant it, and a "Cookie settings" link in the footer lets you change your mind at any time.

What we do not use cookies for

We run no advertising or retargeting pixels, and we do no cross-site tracking or cookie-based fingerprinting. What you submit through the early-access form is stored server-side against the email you give us. That's covered in our privacy policy, because it isn't a cookie.