Cookies Policy

Last updated: 2 November 2026 1. Overview Space Atlas uses cookies and browser storage needed for authentication, security and requested preferences. With your consent only, it also uses Google Analytics 4 cookies to understand how the site is used. Page-visit counts also come from Vercel Web Analytics, which sets no cookies and stores nothing on your device. We do not use advertising cookies. 2. What is stored and why

Authentication session: keeps you signed in and supports secure account requests. Managed by Supabase Auth in local storage (sb-…-auth-token); it is removed when you sign out. Password recovery uses a short-lived session entry (atlas-recovery).
Map and interface preferences: remembers requested display choices such as map labels (atlas-labels) and imagery credits (atlas-credits) in local storage, until you clear it.
Tutorial completion and session prompts: remembers whether you have seen onboarding; not IP-based visitor tracking. Session prompts expire with the browser session; local preferences remain until cleared.
Cookie choice (atlas-consent, local storage): remembers whether you accepted or rejected analytics cookies, until you change it or clear your browser storage.
Google Analytics 4 (optional, only after you click "Accept"): _ga (distinguishes visitors, 2 years) and _ga_Q39SVDH901 (keeps session state, 2 years), first-party cookies set by Google Ireland Limited as our processor. Data may be transferred to Google LLC in the United States under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Google Analytics 4 does not log or store IP addresses. Before you choose, and if you reject, Google's tag runs in Consent Mode: it sets no cookies and sends only cookieless pings without identifiers.
Hosting/security services: our hosting provider (Vercel) may set short-lived security cookies to block automated abuse. Map tiles and external images are plain network requests and set no cookies. During checkout, Stripe sets its own cookies on its payment pages under its cookie policy.

3. Legal basis and consent Strictly necessary storage does not require consent under applicable ePrivacy rules. Analytics cookies are used only with your consent, given through the banner shown on your first visit; rejecting is as easy as accepting and does not limit any feature. Associated personal-data processing follows the Privacy Policy. 4. Your controls You can change or withdraw your analytics choice at any time with "Cookie settings" in the site footer or on this page; withdrawing deletes the Google Analytics cookies. You can also clear or block cookies and local/session storage in your browser. This may sign you out, reset map preferences and show onboarding again. Deleting your account removes its owned server records, while browser settings can be cleared separately. Contact [TO COMPLETE: contact email] for questions. 5. Provider and transfer details The operator is [TO COMPLETE: legal name] (tax ID [TO COMPLETE: NIF/CIF]), [TO COMPLETE: postal address], Spain. Providers, hosting countries and international-transfer safeguards are listed in the Privacy Policy, which also explains your data rights.