Cookies and storage

Cookies for your session and preferences

Not every cookie is set on every visit. Some appear only when you sign in or save a preference. These are our own functional cookies:

• Session cookies (infinitycards-session) and XSRF-TOKEN: maintain your session and protect form requests. The configured session duration is 120 minutes; activity can renew it. Signing out ends your authenticated session.
• remember_web_*: remembers your sign-in when persistent login is used, including the current Google sign-in flow. The configured maximum duration is 400 days; signing out removes this login on this device.
• theme: stores your light or dark appearance preference for up to 400 days after setting or changing it.
• pwa_install_dismissed: remembers that you dismissed the installation prompt for up to 365 days. This choice can also be stored in local browser storage.

Local browser storage

Cookies are not the only form of storage. InfinityCards also uses localStorage for card language, grid display, sorting, filters, navigation, an ongoing tour and features such as synchronising a wishlist change between tabs. Vendor features can also store display and price-tag data you have saved.

• localStorage has no automatic expiry: data remains until the feature replaces or removes it, or you clear the website data.
• sessionStorage usually lasts as long as the relevant tab remains open.
• The PWA cache contains only a neutral offline page, the installation manifest and app icons. New cache versions replace old ones. Private pages, API responses and uploads are not stored in this cache.

No advance consent for future tracking

We no longer use the former analytics and marketing choices. The old infinitycards_cookie_consent cookie and its local copy are removed on a subsequent visit. The website no longer records new choices, IP hashes or browser details through that old consent function. Any historical records do not constitute consent for new features.

Manage storage yourself

Your browser privacy settings let you view, remove or block InfinityCards cookies and website data. Removing them may require you to sign in and set preferences again. Blocking necessary cookies can prevent login and secure forms from working. On sign-out, the website also asks your browser to clear local storage and caches; browser support varies.

External services

When you choose Google sign-in or a Stripe payment, you also open a service provided by that company. It may use its own storage for authentication, payment and security. Please also read Google’s or Stripe’s privacy and cookie policies. Linking to an external website does not mean InfinityCards loads an advertising tracker here.

Changes and contact

If we add non-essential storage or tracking later, we will first explain the provider, purpose and retention period and request new, specific consent. We will also offer an easy way to withdraw that consent. Questions about current storage? Email support@infinitycards.app.