← Legal & Policies

Cookie & Local Storage Policy

Effective:

CollaboTokyo keeps what it stores on your device to a minimum. We do not use advertising cookies, cross-site tracking or third-party social-media pixels. This policy lists everything we store and explains how to remove it. It forms part of our Privacy Policy.

1. Cookies

All of our cookies are first-party and strictly necessary: they keep you signed in, protect sign-in flows against forgery, or remember a choice you made.

ct_session
PurposeKeeps you signed in. Holds a random token whose hash we check against our sessions table. httpOnly, so page scripts cannot read it.
Duration30 days, or until you log out
ct_google
PurposeSet while you sign in with Google, to check that the reply from Google belongs to the sign-in you started.
Duration10 minutes
ct_profile_oauth, ct_oauth
PurposeSet while you connect a social account (YouTube, X, Instagram, TikTok, Twitch, GitHub), for the same protection.
Duration10 minutes
NEXT_LOCALE
PurposeRemembers whether you chose English or Japanese.
Duration1 year

Because these cookies are strictly necessary to provide what you ask for, they do not require consent under the ePrivacy rules that apply in the EEA and UK.

2. Local and session storage

Browser storage stays on your device. These items are only read by our pages to remember your preferences and are not used to track you.

ct_tokyo_theme
PurposeYour light or dark theme choice.
DurationUntil cleared
ct_world_look
PurposeHow your avatar looks in Tokyo, so it appears straight away.
DurationUntil cleared
ct_phone_rect
PurposeWhere you placed and how you sized the in-world phone window.
DurationUntil cleared
ct_booth_draft (session storage)
PurposeKeeps your booth details while you complete payment on Stripe, so they are not lost.
DurationUntil you return from checkout or close the tab
ct_me, ct_world_me
PurposeLeft by earlier versions of the Service, before accounts existed. If present, they are used once to link your old profile to your account when you sign up or sign in.
DurationRemoved once used, or until cleared

3. Analytics without cookies

We measure traffic with Vercel Web Analytics, which does not set cookies or use browser storage and does not track you across websites. It records page views together with the referrer and the country, device type, browser and operating system of the visit. Visits are grouped using a hash of the incoming request that is discarded within 24 hours.

4. Third-party sites

Signing in with Google, connecting a social account and paying through Stripe Checkout take you to those companies' own pages, where their cookie policies apply. Profile images and logos that users link to may be loaded from the platforms that host them, which may receive your IP address and browser information under their own policies.

5. How to remove or block them

  • You can delete cookies and site data for this site in your browser settings (usually under "Privacy" or "Site data").
  • If you block or delete ct_session you will be signed out, and you will not be able to sign in while it is blocked.
  • Blocking NEXT_LOCALE means we may fall back to your browser's language each time; clearing local storage resets your theme, avatar and phone-window preferences.

6. Changes and contact

If we start using any other cookies or similar technologies, we will update this page first and, where required, ask for your consent. Questions: hello@collabotokyo.com.