Cookie & Storage Notice
Last updated: 20 September 2026
For this notice, "cookies" includes similar browser storage technologies such as localStorage and sessionStorage.
Hosting and platform cookies
The following platform and edge cookies were observed on the published site for signed-out visitors. Their purpose and behaviour are described without making a legal classification about whether they are strictly necessary.
| Cookie | Provider / context | Purpose / behaviour | Approximate duration | Browser accessibility | Notes |
|---|---|---|---|---|---|
| __cf_bm | Cloudflare / hosting edge | Bot-management and security token used by the edge | 30 minutes | HttpOnly | Secure; SameSite=None |
| __dpl | Lovable hosting edge | Identifies the deployment serving the page and supports deployment consistency | 24 hours | Readable by browser JavaScript (not HttpOnly) | Secure; SameSite=Lax |
SpareGraph usage analytics and browser storage
SpareGraph does not use Google Analytics, Meta Pixel, Microsoft Clarity or advertising cookies. SpareGraph's own usage analytics is handled server-side and does not use a browser-stored analytics identifier. Public search, Deep Search and feedback work without an analytics cookie. The public app does not use TanStack scroll-restoration storage.
Lovable hosting also injects hosting-managed analytics and instrumentation on published pages. It is not a SpareGraph advertising tracker. It may support hosting-level metrics such as visitors, pageviews, source, device and country.
Authorized internal sign-in may use authentication and session storage when staff sign in. This storage is not created for signed-out public visitors.
Future changes
If SpareGraph later introduces non-essential advertising or marketing storage, or client-side analytics storage, it will not be activated before any required consent mechanism is implemented.
Questions? See the Privacy Policy or contact info@sparegraph.com.