Cookie Policy
Last updated: 2026-06-06 · Beta — under legal review.
This page explains the cookies and browser storage Easy TCG Lister uses, and how to control the optional categories. You can change your choices any time with the button below.
1. Current status
We do not run any analytics, advertising, or cross-site tracking today. The only cookies we set are strictly necessary for the service to work. The Analytics and Marketing categories below exist so that, if we ever add such tools, they stay off until you opt in.
2. Strictly necessary (always on)
sb_access_token,sb_refresh_token— your Supabase sign-in session.HttpOnly,SameSite=Lax,Securein production. Without these you can't stay signed in.- Security + payment flows (MFA challenge, Stripe Checkout redirect) rely on the same session. These can't be disabled while you use the service.
3. Functional (optional)
Browser-only preferences stored in localStorage (never sent to
our server, no personal data): your theme (tcg-theme), sidebar
state, dashboard view/sort, scan-pairing mode, and similar UI choices. These
make the app remember how you like it.
4. Analytics (optional · none in use)
Anonymous product-usage measurement. We don't use any analytics provider today. If we add one, it will load only after you enable this category.
5. Marketing (optional · none in use)
Advertising or cross-context measurement (e.g. ad pixels). We don't use any today, and we don't sell or share personal information for cross-context behavioral advertising — see Do Not Sell or Share. If this ever changes, it will be gated behind this category.
6. Your consent record
When you choose, we store your selection first-party in your browser under
etcg_cookie_consent — a version, a timestamp, the categories you
allowed, and which button you used. It contains no account
ID, email, IP, or token.
7. Changing your choices
Use the Cookie Preferences button above (also in the site footer) any time to review or change categories. Clearing your browser storage resets the banner.
8. More
See our Privacy Policy for how we handle personal data, and Data Requests to access or delete it.