Cookies and storage notice
Version 1.0 · effective 19 August 2026. We keep these policies under review and post material changes here.
This notice covers cookies, local storage, pixels, SDK identifiers and similar technology used by the website, web app and iOS app.
1. Essential technology
We use storage/access technology strictly necessary to provide a feature you request, authenticate and secure an account, balance traffic, prevent fraud, remember a privacy choice or complete a transaction. Consent is not required where a statutory exception applies, but we still explain the technology.
2. Aggregate statistics
UK PECR has a narrow statistical-purpose exception where the sole purpose is to create aggregate statistics about use of the service to improve it, individual-level information is retained only as long as needed to aggregate, results do not identify or support decisions about people, a third party acts only to help with that purpose, clear information is given, and a simple free objection is available.
Seek TCG presently takes the more conservative route: Vercel Web Analytics and Speed Insights remain off until the user opts in. They must be configured without account linkage, advertising, cross-service tracking or profiling. Consent can be changed at any time through without detriment.
If Seek TCG later relies on the statistical exception instead of consent, the technology register and control will be updated before the change; an on-by-default statistics toggle with a simple free objection will be provided, and all exception conditions will be tested.
3. Error monitoring
Server-side security logs that are necessary to protect the requested service are used under the applicable exception. Client-side Sentry diagnostics run only with analytics/diagnostics consent unless a documented scan shows that a specific use is strictly necessary and stores/accesses no non-essential device information. Session Replay is disabled. Request bodies, cookies, query strings and non-allowlisted headers are removed before transmission.
4. Advertising
Seek TCG does not use advertising cookies, pixels, cross-site trackers or third-party advertising profiles. A new advertising or user-level journey technology requires prior opt-in consent, an updated register and equally prominent accept/reject choices before activation.
5. Technology register
| Name | Provider/surface | Purpose and information | Duration | Rule | Control |
|---|---|---|---|---|---|
| Privacy choice | Seek TCG; site/web/iOS | Stores analytics/diagnostics choice | Until cleared or 12 months, then ask again | Strictly necessary to remember the choice | Cookie settings / clear app or site data |
| Session/authentication | Supabase / Seek TCG; web/iOS | Session identifier, refresh state and security controls | Session or configured short-lived token period | Strictly necessary | Sign out / delete account |
| CSRF, load balancing and fraud/security | Seek TCG / infrastructure; site/web | Security and routing identifiers | Session / short-lived | Strictly necessary | Not optional while using affected feature |
| Vercel Web Analytics | Vercel; site/web | Cookieless page/event and coarse technical statistics; no account link | Per request / aggregation window | Consent at present | Cookie settings |
| Vercel Speed Insights | Vercel; site/web | Performance timing and coarse device/browser data | Per request / aggregation window | Consent at present | Cookie settings |
| Sentry browser diagnostics | Sentry; web | Error stack, release, coarse device/browser and allowlisted diagnostic context; no replay | Client event plus supplier retention in vendor register | Consent unless a specific strictly-necessary use is documented | Cookie settings |
| Apple StoreKit state | Apple; iOS | Purchase/entitlement/restore identifiers | Apple's configured/legal period | Necessary for requested IAP transaction | Apple account controls |
The production cookie/SDK scan, not this table alone, determines what is actually present. Unlisted optional technology must not be deployed.
6. Managing choices
The first-layer control gives equally prominent Accept optional and Reject optional choices, with a link to granular settings. Optional scripts are blocked before consent. Withdrawing consent stops future optional storage/access as soon as technically possible and is no harder than accepting.
Questions or objections: hello@seektcg.com.