Version 2026-09-05 • Effective Date: September 5, 2026
At Algo Flow, we believe in radical transparency. We operate a strict Zero-Ad-Tracker policy: we never deploy commercial advertising cookies, cross-site tracking beacons, or behavioral monitoring scripts. This document details the small set of essential cookies and browser storage tokens required to operate the platform securely.
Zero Commercial Tracking
No third-party ad networks, no retargeting pixels, and no data harvesting brokers ever operate on our domains.
Strictly Necessary Cookies Only
HTTP cookies are utilized strictly for authenticating logged-in sessions via secure, encrypted Supabase Auth tokens.
Secure HttpOnly Attributes
Authentication tokens are protected by `HttpOnly`, `SameSite=Lax`, and `Secure` flags to prevent XSS credential theft.
Local Storage for Preferences
Your theme (Dark/Light) and visualizer layout preferences remain strictly stored on your local browser device.
Cookies are small text files placed on your computer or mobile device by websites that you visit. They are widely used to make web applications work efficiently and provide secure authentication states.
In addition to standard HTTP cookies, modern web applications utilize HTML5 Local Storage—a secure client-side storage mechanism that allows settings (such as your chosen visual theme) to persist on your device without sending redundant network traffic to external servers with every page request.
We maintain an exhaustive and minimal list of cookies. All cookies on Algo Flow are classified as Strictly Necessary:
| Cookie Name | Purpose & Function | Type & Security | Lifespan |
|---|---|---|---|
| sb-*-auth-token | Maintains authenticated session state via Supabase Auth | Strictly Necessary • HttpOnly, Secure, SameSite | Session / 1 Year |
| sb-*-refresh-token | Allows automatic cryptographic renewal of expired session tokens | Strictly Necessary • HttpOnly, Secure | Session / 1 Year |
Privacy-First Web Telemetry: Algo Flow uses Vercel Web Analytics to monitor platform health and Core Web Vitals. Vercel Web Analytics operates completelycookie-less—it does not use cookies, does not persist identifiers across sites, and does not store personal data.
We use browser local storage exclusively for your convenience, ensuring your interactive workspace preserves your preferences across visits:
| Storage Key | Data Stored | Privacy Impact |
|---|---|---|
| algo-flow-theme | Stores active UI color theme ("dark" or "light") | Zero tracking; strictly local client presentation |
| algo-flow-lang | Persists preferred programming language for code panel ("javascript", "python", "cpp", "java") | Zero tracking; strictly client editor utility |
| algo_flow_sound_muted | Persists audio sound effects toggle for mental math exercises | Zero tracking; strictly client audio utility |
| visualizer-tour-[slug] | Records whether the interactive tour has been completed for a specific algorithm | Zero tracking; prevents repetitive tour popups |
| algo_flow_mental_math_stats_v1 | Caches local calculation statistics, operation mastery radar, and practice session history | Zero tracking; enables seamless offline-friendly practice tracking |
You have the full right to decide whether to accept or reject cookies. You can exercise your cookie preferences by adjusting your browser settings:
Note: If you choose to block all cookies, public visualizers will continue to function fully in guest mode, but persistent account authentication (Sign in) will be unavailable.
If you have questions about our use of cookies, local storage, or data protection standards, please contact our team:
For additional details regarding our data governance, please consult our Privacy Policy, Terms of Service, and License Agreement.