Cookies & storage
What SubathonOS stores on your device, why it is needed and how to change your choices.
Your choices
On your first ordinary visit, SubathonOS shows controls with equally available options to accept optional interface storage, reject it or manage the choice. Necessary storage remains available because it is needed for security, authentication or a service you requested.
Strictly necessary storage
The main signed session cookie keeps authenticated users signed in. Short-lived OAuth, invitation and support-flow cookies protect sign-in and actions you request. The subathonos_cookie_choice cookie records the choice you made so we do not repeatedly ask you. Necessary cookies are not used for advertising.
Security-sensitive cookies are HttpOnly where the browser does not need to read them. Cookies are scoped and protected with appropriate SameSite/Secure settings according to their purpose and environment.
Interface and functional storage
Page Studio and Overlay Studio may remember limited interface state such as whether an introductory guide has been dismissed. Current examples include subathon-page-guide-v1 and subathon-overlay-guide-v2. These values are not used for cross-site tracking, advertising or audience profiling.
UK PECR rules contain exceptions for some low-intrusion storage that is necessary for, or supports, functionality requested by the user. Where a use is not exempt and consent is required, SubathonOS must not enable it before a valid choice.
Analytics
SubathonOS currently does not intentionally load optional third-party browser analytics in the application shell. Event analytics inside SubathonOS are creator-controlled server-side product features and are not the same thing as browser tracking cookies.
If optional analytics storage is introduced later, the cookie inventory and consent version must be updated and affected users must be asked before that non-exempt technology runs.
Advertising and marketing
SubathonOS currently does not intentionally load advertising pixels, behavioural advertising cookies or cross-site marketing trackers. The cookie manager therefore shows these categories as not in use rather than collecting meaningless advance consent for technology that has not been specified.
Changing or withdrawing a choice
You can reopen the cookie controls at any time using the button above. Rejecting optional storage is designed to be as easy as accepting it. Changing a choice does not remove storage that is strictly necessary for an active authenticated or security function, and may not automatically delete historic browser values already created for exempt functionality.
Third-party services
Following a link to or interacting directly with a third-party service such as Twitch may cause that provider to use its own cookies or device storage under its own policies. SubathonOS does not control storage set on a third party's own domain.