Cookies and Storage
Filmdex keeps the use of your browser's storage to what the site needs to work. This page lists everything it stores and every outside service your browser may contact while you use it, our own database provider included.
In short
- Sign-in cookies, set when you sign in (and, for a short time, during sign-up, a password reset or a change of e-mail address), so that you stay signed in, and one sign-up cookie while a sign-up waits for its e-mail code.
- One local storage entry with your interface preferences.
- No advertising, tracking or analytics cookies, and no social media plug-ins.
- Because everything we store is strictly necessary for a service you ask for, we do not show a cookie consent banner.
What we store
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Cookies whose names start with sb- (for example sb-…-auth-token, which may be split into numbered parts) | Cookie set by Filmdex; strictly necessary | Keep you signed in. They hold your sign-in tokens, which contain your account's identifier and your e-mail address (not the other details you entered at sign-up). They are HttpOnly (page scripts cannot read them), SameSite=Lax and, over HTTPS, Secure. During sign-up, a password reset or a change of e-mail address the sign-in library may also store a short-lived verification value under the same prefix. | Renewed while you use the site, at most 400 days; signing out deletes them |
| filmdex-signup | Cookie set by Filmdex; strictly necessary | Set when you send the sign-up form, while a sign-up from this browser may be waiting for its e-mail code: a random value that ties the sign-up to this browser, so that only the browser that filled in the form can finish it with the code (we keep only a one-way hash of the value). It contains nothing about you. HttpOnly, SameSite=Lax and, over HTTPS, Secure. | Deleted when the code is confirmed; otherwise it expires one day after the last sign-up attempt |
| filmdex:prefs | Local storage on your device | Your interface preferences on this device: the quiz timer, spoiler-safe mode, reduced motion and the collapsed sidebar. It is never sent to us. | Until you clear the site data in your browser |
| filmdex:tz-sent | Session storage on your device; strictly necessary | When you are signed in: your username and your browser's time zone, so that the time zone is sent to us only once per visit (we use it only for the badges that depend on the local time of day). | Until you close the tab |
Third parties your browser may contact
- Cloudflare Turnstile: on the sign-in, sign-up, password-reset, new-code and account-security forms, a bot check loads from challenges.cloudflare.com. It runs in its own frame and may use storage there as needed for the check, under Cloudflare's privacy policy.
- Supabase (our database provider): uploaded profile photos load from its storage, and the sign-up form asks it whether the username you type is still free. Filmdex sets no cookie for this, but Supabase receives your IP address and browser information.
- TMDB: posters and backdrops load from image.tmdb.org. Filmdex sets no cookie for this, but TMDB receives your IP address and browser information.
- YouTube: only when you press Play on a trailer does the player load from youtube-nocookie.com. From then on YouTube (Google) may store cookies or similar data in your browser under Google's privacy policy. Nothing is loaded from YouTube before you press Play.
Why there is no consent banner
Under the rules on cookies (in the European Union, Article 5(3) of the ePrivacy Directive as implemented in each country), storing information in your browser requires your consent unless it is strictly necessary to provide a service you have asked for. The sign-in cookies, the sign-up cookie and the preferences entry are strictly necessary in that sense, and the YouTube player loads only when you choose to play a trailer, after a notice shown next to the player. We therefore do not use a consent banner.
If we ever add storage that is not strictly necessary, such as analytics, we will update this page and ask for your consent first where the law requires it.
How to control it
- Sign out to delete the sign-in cookies in this browser.
- Clear your browser's site data for Filmdex to remove the preferences entry (your preferences then return to the defaults).
- You can block cookies in your browser settings, but you will then not be able to sign in.
Changes
We update this page whenever what we store changes. The date at the top shows the last change. More about how we handle personal data: Privacy Policy.