Cookies & Storage
Commandant Vault does not currently set any traditional browser cookie for visitors. What it does use is described precisely below — we’d rather be exact than call everything “a cookie” when it isn’t one.
Strictly necessary storage
If you sign in to the staff admin area (not something a regular visitor does), Supabase’s authentication system sets a session cookie so you stay signed in. This is strictly necessary for that feature to work at all and applies only to signed-in staff — a browsing visitor never receives it.
Your consent choice
Whether you’ve accepted or refused analytics is remembered in your browser’s localStorage — a small piece of storage, not a cookie, that isn’t sent to the server automatically. This is what lets Commandant Vault avoid asking you again on every visit.
Analytics session storage (only after you accept)
If you accept the analytics prompt, a random session identifier is generated in your browser and held in sessionStorage. Unlike a cookie, this is never sent to the server automatically — it only reaches Commandant Vault when the site’s own code explicitly includes it in a request, and it is cleared by your browser the moment you close the tab. See the Privacy Policy for exactly what gets recorded once that happens.
If you refuse, or haven’t answered the prompt yet, this identifier is never created and no analytics request is ever sent — the site, search, and downloads all continue to work normally.
Changing your choice
Use the “Privacy choices” link in the footer of any page to reopen the prompt and change your answer at any time.
Future advertising cookies
No advertising technology is active today, and no advertising cookie is currently set. If Commandant Vault introduces advertising in the future (for example, Google AdSense), a proper, Google-certified consent management platform (CMP) will be implemented at that time to handle advertising-specific consent. The mechanism described on this page today covers Commandant Vault’s own first-party analytics only — it is not that future advertising CMP, and we won’t describe it as one before it exists.