Version 2026-10-09 • Effective Date: October 9, 2026
At AlgoFlow, we believe in radical transparency. We operate a strict Zero-Ad-Tracker policy: we never deploy commercial advertising cookies, cross-site tracking beacons, or behavioral monitoring scripts. We use Google Analytics 4 (GA4) solely for pseudonymous, aggregate traffic insights to improve the platform. This document details the cookies and browser storage tokens used to operate the platform.
Zero Commercial Ad Tracking
No third-party ad networks, no retargeting pixels, and no data harvesting brokers ever operate on our domains.
Privacy-Focused Analytics
We use Google Analytics 4 solely for pseudonymous, aggregate traffic insights. GA4 is never used for advertising, remarketing, or profiling.
Secure HttpOnly Attributes
Authentication tokens are protected by `HttpOnly`, `SameSite=Lax`, and `Secure` flags to prevent XSS credential theft.
Local Storage for Preferences
Your theme (Dark/Light) and visualizer layout preferences remain strictly stored on your local browser device.
Cookies are small text files placed on your computer or mobile device by websites that you visit. They are widely used to make web applications work efficiently and provide secure authentication states.
In addition to standard HTTP cookies, modern web applications utilize HTML5 Local Storage—a client-side persistent storage mechanism that allows non-sensitive preferences (such as your chosen visual theme) to persist on your device without sending redundant network traffic to external servers with every page request. Local storage is never used for authentication credentials or sensitive cryptographic keys.
We maintain an exhaustive and minimal list of cookies. Authentication cookies on AlgoFlow are classified as Strictly Necessary, and analytics cookies are classified as Performance / Analytics:
| Cookie Name | Purpose & Function | Type & Security | Lifespan |
|---|---|---|---|
| sb-*-auth-token | Maintains authenticated session state via Supabase Auth | Strictly Necessary • HttpOnly, Secure, SameSite | Session / 1 Year |
| sb-*-refresh-token | Allows automatic cryptographic renewal of expired session tokens | Strictly Necessary • HttpOnly, Secure | Session / 1 Year |
| _ga | Distinguishes unique visitors using a randomly generated pseudonymous client identifier (Google Analytics 4) | Performance / Analytics • SameSite=Lax, Secure | 2 Years |
| _ga_<container-id> | Persists session state (e.g., page view count within a session) for Google Analytics 4 | Performance / Analytics • SameSite=Lax, Secure | 2 Years |
Privacy-First Web Telemetry: In addition to GA4, AlgoFlow uses Vercel Web Analytics to monitor platform health and Core Web Vitals. Vercel Web Analytics operates completely cookie-less—it does not use cookies, does not persist identifiers across sites, and does not store personal data.
GA4 restrictions on AlgoFlow: Google Analytics advertising features, remarketing, and user-level profiling are disabled. Analytics data is never linked to your AlgoFlow account identity or shared with third-party advertisers.
We use browser local storage exclusively for your convenience, ensuring your interactive workspace preserves your preferences across visits:
| Storage Key | Data Stored | Privacy Impact |
|---|---|---|
| algo-flow-theme | Stores active UI color theme ("dark" or "light") | Zero tracking; strictly local client presentation |
| algo-flow-lang | Persists preferred programming language for code panel ("javascript", "python", "cpp", "java") | Zero tracking; strictly client editor utility |
| algo_flow_sound_muted | Persists audio sound effects toggle for mental math exercises | Zero tracking; strictly client audio utility |
| visualizer-tour-[slug] | Records whether the interactive tour has been completed for a specific algorithm | Zero tracking; prevents repetitive tour popups |
| algo_flow_mental_math_stats_v1 | Caches local calculation statistics, operation mastery radar, and practice session history | Zero tracking; enables seamless offline-friendly practice tracking |
| algoflow_completed_chapters | Tracks completed DSA curriculum chapters for guest and offline study progress | Zero tracking; strictly client-side educational progress state |
You have the full right to decide whether to accept or reject cookies. You can exercise your cookie preferences by adjusting your browser settings:
Note: If you choose to block all cookies, public visualizers will continue to function fully in guest mode, but persistent account authentication (Sign in) will be unavailable.
If you have questions about our use of cookies, local storage, or data protection standards, please contact our team:
For additional details regarding our data governance, please consult our Privacy Policy, Terms of Service, and License Agreement.