Effective date: October 27, 2026 · Version: 2026-10-27
This notice explains the browser storage used by Tarca's current website and web application. Read it together with our Privacy Notice. A technology can store information on your device even when it is called local storage rather than a cookie.
What the current Service uses
| Use | Location and purpose | Duration and control |
|---|---|---|
| Sign-in session | The application uses Supabase's browser authentication storage to retain and refresh your session | Persists while the browser retains it and the session remains valid; sign out or clear site data to remove the local session |
| Interactive sample | The sample workspace, sample collaboration and sample diagrams use local storage on tarca.app | Remains on that browser until the relevant sample is reset or site data is cleared; not synchronized into a live workspace |
| Unsaved form/editor state | Many forms, private-link screens and editor drafts hold temporary state in browser memory | May disappear on reload, navigation or closing the tab; not a durable backup |
| Public-form security check | Cloudflare Turnstile loads on published form pages to assess browser/connection signals and return a challenge token | Necessary to send a new response; provider security mechanisms depend on the widget/browser configuration. Blocking the check can prevent submission |
| Hosting and security | Infrastructure providers may use necessary request or security mechanisms to deliver and protect the site | Controlled by the purpose and provider configuration; ordinary access records can also be retained on provider systems |
The static tarca.app landing page does not currently set an analytics or advertising cookie. Its demonstration checklist is temporary page state. The current application does not install advertising pixels or a third-party product-analytics tracking script.
Public external update screens keep the private link credential in memory after removing it from the visible address. Reopening the original email may be needed after reloading. Uploaded files are stored privately on the server under the update request; clearing your browser is not a server-side deletion request.
Public intake answers and retry details stay in page memory while the form is open; reloading or closing can lose an unsent draft. Submitting stores answers in the destination workspace. Clearing site data does not erase that submission. We do not send the form's answer fields to Turnstile as verification inputs. Turnstile receives technical signals and is a security tool, not an advertising or marketing-consent control. See Cloudflare's Turnstile Privacy Addendum for its signal-processing practices.
Choices
You may clear cookies and local storage through your browser's site-data settings or use a private browsing window. Blocking all storage can prevent sign-in persistence or the sample from working. Clearing browser data can remove unsynchronized sample changes, but it does not delete account or workspace records stored on our servers.
Sign out before leaving a shared device. People who can access the same browser profile may be able to use an active session or see locally stored sample information. Use device-level protection in addition to your account password.
There is no optional advertising category to switch off in the current Service. If we later add nonessential tracking that requires permission, we will update this notice and provide an appropriate choice before activating that processing. We do not treat acceptance of essential session storage as permission for future advertising.
The Privacy Notice explains Do Not Track, Global Privacy Control and your information rights. For privacy or deletion requests, email privacy@tarca.app or use Legal & contact. Clearing site storage is not the same as cancelling a subscription or deleting an account.