Cookies and browser storage

Document version:

The transition is prepared in this software version. A complete production switch of all services has not yet been confirmed. Transition and earlier data explains remaining data flows, storage and deletion limits.

Cookies can be sent with requests; LocalStorage is bound to an origin and has no general expiry time. SessionStorage relates to the page/tab session; browser restoration may extend it. synhub.dev, hub.synhub.dev, s.synhub.dev, eingregor.synhub.dev and it-tools.synhub.dev are separate origins. Browser deletion does not automatically affect other devices, domains, databases, cloud data or backups.

This inventory also describes earlier browser data. It is not proof that all entries exist on every device. LS stands for LocalStorage, SS for SessionStorage. Keys and possible content remain visible until the transition.

Origin / entryPurpose, earlier duration and deletion pathTreatment in target operation
Hub LS h42-startpage-guest-dataFavourites, settings, dashboards/notes, possible history portions; no general TTL. App reset/origin deletion; previously possibly a Drive copy.Basic local function; treat earlier cloud copies separately.
Hub LS h42-startpage-migration-completedGuest migration marker; no general TTL, origin deletion.Sign-in and migration are disabled in this version. Earlier markers may remain until origin deletion.
Hub LS h42-history-deleted-keys-v1, h42-history-last-timestamp-v1Deletion markers and monotonic timestamp for local history entries; no general TTL. Origin deletion.Local history consistency, no Drive synchronisation in this version.
Hub LS h42-history-v1Time, URL, title, type, icon; default 30 days/1000 entries, configurable, filtering on load/write. No demonstrated daily physical deletion.Local history remains available. Retention is configurable; local deletion does not remove earlier copies on other devices or in Drive.
Hub LS h42-news-cache-v1News excerpts/URLs, no demonstrated physical TTL, origin deletion.RSS disabled; stored entries remain until local deletion.
Hub LS h42-news-favorites-v1, h42-news-pinned-categories-v1Saved news/categories; no general TTL, function or origin deletion.RSS disabled; stored entries remain until local deletion.
Hub LS h42-cookie-consentRemembers dismissal of “Got it”, no general TTL.The entry only remembers dismissal of the notice; it is not proof of consent to other processing purposes.
Hub SS h42-favorites-pathFavourites folder during the page/tab session.Local navigation during the tab session. Browser restoration may extend the session; deletion through website data settings.
Hub LS toolbox-language, toolbox-tool-order, toolbox-module-settingsLanguage/order/module state, no general TTL. Reset/origin deletion.Local preferences; earlier Drive copies separate.
Hub LS calculatorShowButtonsCalculator presentation/version, no general TTL.Local preference, origin deletion.
Hub LS cookieConsentOld notice component, rendering not demonstrated; no general TTL.Possible earlier data, no purpose consent.
Hub and Shortener LS nextauth.messageTab communication, event/timestamp, observed even without sign-in; no built-in TTL.Disabled sign-in no longer writes this key. Old entries can be deleted through website data settings.
NextAuth __Secure-next-auth.session-token and conditional CSRF/callback/state/PKCE cookiesSession JWT; Secure/HTTP-only/HttpOnly, SameSite=Lax demonstrated in code, library default 30 days, not measured in production; chunking possible.No new auth session in this version; old sessions are no longer usable. Cookie names, domain and production periods have not been fully confirmed.
Social LS language, cookiesAcceptedLanguage or notice dismissed; no general TTL, origin deletion.Language and dismissal of the notice remain local interaction preferences. The dismissal marker is not proof of consent to other purposes.
IT-Tools LS isMenuCollapsed, favoriteToolsName, vueuse-color-scheme, locale, menu-tool-option:collapsed-categoriesObserved on first visit, names suggest preferences; exact payload, purpose/TTL unresolved.Exact storage usage, retention and tool-specific reset paths have not yet been fully confirmed. Website data settings can locally delete this origin's data.
Web cookie synhub-languageWebsite language en/de, written only on selection; current host, Path=/, HttpOnly, SameSite=Lax, 365 days from selection, Secure on HTTPS. Sent to this host on requests. Change with the language control or delete through website data settings.Language preference for server-rendered content and document language; English without a valid value. No LocalStorage/SessionStorage for this preference. Infrastructure remains separate.
Cloudflare, conditionally cf_clearance, __cf_bm, __cflb, _cfuvidPossible product cookies, not seen in the normal sample. Cloudflare states 30 minutes of inactivity for __cf_bm.Which cookies are actually used and which periods apply have not yet been fully confirmed for the respective hosts and security rules. Disabling has not been demonstrated.

Browser data can be removed per origin through website data settings. Individual Hub functions offer reset/deletion; JavaScript cannot reach HTTP-only cookies. Browser deletion does not automatically end all sessions and does not delete a Drive file, permission, short-link row or backup. Local deletion, revocation and deletion at providers each affect only the relevant data holdings.