Cookies & Data Tracking
Exactly what this platform stores in your browser, and what it does not · Last updated 19 September 2026
1. The short version
We use the minimum browser storage needed to keep you signed in and to remember a consent choice while you complete it. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts on this platform.
2. What is actually stored
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| Supabase authentication token | Local storage | Keeps you signed in between page loads and refreshes your session | Until sign-out or expiry |
dp_pending_consents | Session storage | Holds consent selections while you complete registration, so a dropped connection does not lose them | Cleared once submitted |
dp_lang | Local storage | Remembers whether you chose English or Turkish | Until you clear it |
dp_utm | Session storage | Remembers which link brought you here (for example a friend’s invitation) so it can be attached to your sign-up | Cleared when the tab closes |
dp_admin_token | Session storage | Short-lived administrative session for staff. Never set for participants | Cleared when the tab closes |
These are strictly necessary for the platform to function. Without them you cannot stay signed in, so they do not require consent under PECR — but we list them here so you can see exactly what is held.
3. What we do not do
- No advertising or retargeting cookies.
- No third-party analytics, heatmap or session-replay scripts.
- No social media tracking pixels.
- No cross-site profiling, and no sale of behavioural data.
4. Your research consent is separate
Consent to take part in research, and consent to process special category profile data, is recorded against a versioned consent document in your account — not in a cookie. You can review or withdraw it at any time from the Privacy Centre, independently of anything described on this page.
5. Managing storage
You can clear this storage through your browser settings at any time. Doing so signs you out and discards any consent selections you had not yet submitted; it does not delete your account or any consent already recorded.
6. Email
Our notification emails do not contain tracking pixels. Delivery outcomes are recorded against a one-way hash of the recipient address so that we can detect a failed send without storing the address in the log.