Strictly necessary
- Laravel session cookie — maintains your sign-in. Cleared on logout.
- XSRF-TOKEN — CSRF protection on every form submission.
- insta_device_fp — device fingerprint fallback for the 2-device cap. Year-long expiry.
- locale — your selected display language.
Functional / preference
- localStorage: instatuner.device.fingerprint.v1 — mirror of the device fingerprint so the cap survives cookie wipes inside the same browser.
- localStorage: theme + perf-mode — remembers your appearance + animation choices.
Analytics / advertising
None set by INSTATuner. We measure usage server-side via the audit_log + page_views tables, none of which involve third-party trackers.
How to clear
Use your browser's privacy controls. Clearing site data resets the device fingerprint, which counts as a new device on next sign-in (you'll need to confirm via email again).