01
Cookies and Similar Technologies
A cookie is a small item of data stored by a website in a browser. Cookies can maintain sessions, remember preferences or protect requests. Similar technologies include localStorage, which also keeps information on a device.
This Policy covers traditional cookies and local storage used by the LuxureVerse website and Android application.
02
Current Technical Inventory
Both cookies contain only a random token, not personal data. The server retains only a hash or short-lived reference for verification. They are configured as HttpOnly, SameSite=Lax and, in production, Secure, so page JavaScript cannot read them.
- luxureverse_session — first-party cookie used to authenticate an account, maintain a session and allow revocation. Maximum duration: 30 days or until logout or revocation.
- patreon_oauth_state — first-party cookie used only during the “Login with Patreon” handshake, to verify that the sign-in response actually came from Patreon and prevent request forgery. HttpOnly, SameSite=Lax, expires after 10 minutes and is deleted as soon as sign-in completes.
- adultVerified — localStorage value recording that a visitor confirmed being at least 18. It remains until site data is cleared or the preference is reset.
- luxureverseAppMode — Android-app localStorage value identifying the APK environment and limiting navigation to account and reading routes. It remains while application data stays installed.
03
Why These Technologies Are Necessary
- Authentication: without the session cookie, every page change would require login and private account data could not be securely associated with its owner.
- Patreon sign-in: without the OAuth-state cookie, LuxureVerse could not safely confirm that a “Login with Patreon” response belongs to the sign-in attempt the user actually started.
- Adult access: the local confirmation avoids repeating the 18+ gate on every visit and does not contain a visitor’s name, date of birth or browsing history.
- Android operation: app mode keeps the APK focused on authentication, the account and the Reading Room rather than the public website.
04
Technologies We Do Not Use
Selected books, progress, favorites, bookmarks and notes are stored in the backend with the account, not as browser-local databases. The frontend removes obsolete local keys for these functions when found.
- Google Analytics or Google Tag Manager.
- Meta Pixel, TikTok Pixel or advertising networks.
- Behavioural-advertising cookies.
- Cross-site tracking or the sale of identifiers.
- Heat maps or session recordings.
- Commercial device fingerprinting.
- Analytics of private reading habits.
05
Hostinger, Resend and Patreon
Hostinger is the infrastructure provider. Server logs are not cookies, although VPS configuration may record IP address, date, requested route and device user agent.
Resend operates from the backend to deliver messages and synchronise newsletter choices; the current integration does not place a Resend cookie through the frontend.
Patreon issues its own cookies once a user leaves luxureverse.com to sign in or manage a pledge on patreon.com; those are set and controlled by Patreon under Patreon’s own cookie and privacy policies, not by LuxureVerse. LuxureVerse only sets its short-lived patreon_oauth_state cookie described above.
06
User Controls
Users may block or delete cookies through browser settings. Removing luxureverse_session requires a new login. Removing adultVerified causes the 18+ confirmation to appear again.
A session should be ended securely through Log Out or the session controls in Settings. Clearing local page storage alone does not revoke an active server session. Uninstalling the Android app or clearing its data removes device storage but does not delete the account or necessarily revoke sessions on other devices.
07
Global Privacy Control
LuxureVerse recognises Global Privacy Control as an opt-out signal where applicable law requires it. The current practical result is the same for every visitor: LuxureVerse does not sell personal information or share it for behavioural advertising.
08
Android Application
The APK loads LuxureVerse in an Android environment and may retain the session cookie and local app-mode indicator. It currently includes no advertising SDK, Firebase Analytics or Firebase Crashlytics.
Uninstalling the application or clearing its data removes device storage, but account deletion and revocation of other sessions must be performed through Settings or support.
09
Future Changes
If LuxureVerse introduces optional analytics, advertising, new SDKs or external content, it will inventory them first. Where legally required, those technologies will remain blocked until the user can accept, reject or customise a revocable choice.
This Policy will be updated whenever a purpose, duration or provider changes. A necessary technology will not silently be converted into a tracking tool.
10
Contact
Questions about cookies, local storage or privacy may be sent to support@luxureverse.com. General personal-data processing is described in the Privacy Policy.