Cookie policy

A cookie is a small piece of data that a website stores in your browser. It usually holds an identifier, some data for the cookie’s purpose, and an expiry date. Sites use cookies to keep you signed in, remember settings, measure visits or show ads.

Cookies set by the site you are visiting are first-party cookies. Cookies set by other companies are third-party cookies and can be used to follow you across sites. Gumdex sets first-party cookies only; the Google Analytics cookies are first-party cookies written by Google’s script.

• sb-…-auth-token

  Essential · Until you sign out, up to 400 days

  Keeps you signed in on this device. May be split into several numbered cookies.

• sb-…-auth-token-code-verifier

  Essential · Until sign-in completes

  Links a sign-in request to this browser so it can be completed securely.

• ld_login_email

  Essential · 1 hour, or until you sign in

  Holds the email address a sign-in code was sent to, between the two sign-in steps.

• ld_list

  Functional · 1 year

  Remembers which of your lists you opened last.

• ld_consent

  Essential · 1 year

  Remembers whether you accepted or rejected analytics cookies, so we do not ask on every visit.

• _ga

  Analytics · 2 years

  Set by Google Analytics, only if you accept. A random identifier that tells visits from the same browser apart.

• _ga_N7KC61M2TS

  Analytics · 2 years

  Set by Google Analytics, only if you accept. Keeps track of the current visit.

Sign-in cookies are set by our sign-in provider, Supabase, on the Gumdex domain; they are first-party cookies and are used only for Gumdex.

• Essential: needed for sign-in and security. The service cannot work without them. We use these.
• Functional: remember choices you make, such as your last list. We use one.
• Performance and analytics: measure how people use a site. We use Google Analytics only if you accept it.
• Advertising and targeting: build a profile to show you ads, often across sites. We do not use these.

Essential and functional cookies need no consent. We ask before setting analytics cookies: Google Analytics does not load until you choose Accept, and Reject means it never loads. Our hosting provider, Vercel, also counts visits and measures page speed, without cookies and without identifying you. Addresses of secret share links are never sent to either.

Your browser loads some card images from external image hosts. We do not ask them to set cookies, but they receive your IP address and browser details, as any website does. Their own policies cover what they do.

To change your analytics choice, use Cookie settings at the foot of this page, or on your Account page. Rejecting after accepting deletes the Google Analytics cookies. You can also view, block and delete cookies in your browser settings. If you block Gumdex’s essential cookies, you will not be able to sign in. Deleting the list cookie only means Gumdex opens your default list next time.

If we change the cookies we use, we will update this page and its effective date. Questions: use the contact form.