localStorage to keep you signed in. Under PECR (UK) / the
EU ePrivacy Directive, storage that is strictly necessary for a service the user
requested (here: staying logged in) does not require consent — but it must still
be clearly disclosed, which is what this notice does. Items marked
[REVIEW: …] still need confirmation.| What | Type | Purpose | Consent needed? |
|---|---|---|---|
bc_token (auth token) |
Browser localStorage entry | Keeps you logged in after sign-in so you don't re-enter your password on every request. Strictly necessary for the logged-in service you asked for. | No (strictly necessary / "essential") — disclosure only |
That's it. We do not use:
[REVIEW: confirm no third-party script/font/CDN sets a cookie or storage entry. If a self-hosted font or asset is added later, re-check. Also confirm whether the server sets any session cookie in addition to the localStorage token — code shows a Bearer token in localStorage, not a cookie; keep this notice in sync if that changes.]
Because the only thing we store is essential to deliver the logged-in service you requested, the law does not require a consent pop-up for it. We therefore do not show a cookie-consent banner, which also keeps the experience clean and child-friendly (consistent with the ICO Children's Code). We tell you about it here and in the Privacy Policy instead.
localStorage['bc_token'].]If we ever introduce non-essential storage (we have no plans to), we would ask for your consent first and update this notice.
Contact: [REVIEW: privacy contact email].