1. What we store
Cookies and “local storage” are small pieces of data your browser keeps for a website. DocRoute uses the following, all first-party (set by DocRoute itself):
| Name | Type | Purpose | How long |
|---|---|---|---|
sb-<project>-auth-token (may be split into .0, .1 …) | Cookie (first-party) | Keeps you signed in and lets the server load your own profile. Set only when you sign in. | Until you sign out; at most 400 days |
sb-<project>-auth-token-code-verifier | Cookie (first-party) | Protects the sign-in with Google or an email link from being hijacked. Used only during sign-in. | Removed once sign-in finishes |
docroute-theme | Local storage | Remembers light or dark mode if you choose one. | Until you clear site data |
docroute:saved-universities:… and docroute:route-progress:… | Local storage | Remembers universities you saved and route tasks you ticked off, on this device, when you are not signed in. | Until you clear site data or sign in (then moved to your account) |
docroute-cookie-consent | Local storage | Remembers your cookie choice (accept all or necessary only) so we do not ask again. | Until you clear site data or change your choice |
2. Your choice
Under the ePrivacy rules (in Slovakia § 109(8) of Act No. 452/2021 Coll. on Electronic Communications), storing information on your device needs your consent unless it is strictly necessary for a service you asked for. Everything listed above is strictly necessary, so it is used whichever option you pick.
One optional tool exists: visit statistics (Vercel Web Analytics). It loads only if you choose Accept all. It sets no cookie and stores nothing on your device; Vercel recognises a visit by a hash of the request that is discarded after 24 hours. For each page view it receives the page address without the part after “?” (where your route answers are), the referring site, country or region, browser, operating system and device type, and shows us only totals. If you choose Necessary only, it is never loaded, and switching to Necessary only stops it from sending anything further. You can change your choice here at any time:
Your current choice: not chosen yet.
3. Other websites
If you choose “Continue with Google”, the Google sign-in page sets its own cookies under Google's policies. Photos are loaded from Wikimedia (upload.wikimedia.org), which receives your IP address as described in the Privacy Policy. Official websites we link to have their own cookie rules.
4. How to remove them
Signing out removes the sign-in cookies. You can delete all cookies and site data for DocRoute in your browser settings at any time. The site still works afterwards; you will just need to sign in again, and progress saved only on this device will be lost.
5. Questions
Write to GitHub (DocRoute issues).