Cookie Policy
Last updated: 16 September 2026
This page lists every cookie and every browser-storage key Yaniv Levy sets, who sets it, what it is for and how long it lasts. Nothing beyond what is strictly necessary runs before you agree to it.
1. What this covers
"Cookies" here means cookies and the equivalent browser technologies — localStorage, sessionStorage and similar — because the law treats them the same way: storing or reading information on your device needs your consent unless it is strictly necessary to provide the service you asked for.
2. Categories we use
Strictly Necessary (always on — cannot be disabled)
Sign-in session, security tokens, your saved consent choice, your colour theme and your API key. The site cannot work without these, so they cannot be switched off.
Analytics (off unless you opt in)
Google Tag Manager and Google Analytics 4 — aggregate page views and feature usage so we can see what to improve. Off unless you switch it on; nothing is loaded until then.
3. Full list
Scroll the table sideways on a narrow screen.
| Name | Type | Set by | Purpose | Retention |
|---|---|---|---|---|
| authjs.session-token | Cookie | SkyInfo (first party) | Keeps you signed in after a Google sign-in. Encrypted; holds your account id and email. | 1 hour |
| authjs.csrf-token / authjs.callback-url | Cookie | SkyInfo (first party) | Cross-site request forgery protection and return-to-page during the sign-in round trip. | Session |
| adi_cookie_consent | localStorage | SkyInfo (first party) | Stores the choice you made in this banner, so we do not ask again and can prove what you allowed. | Until you clear it |
| theme | localStorage | SkyInfo (first party) | Remembers dark or light mode. | Until you clear it |
| avi_api_key | localStorage | SkyInfo (first party) | Holds your API key in the browser so requests from the dashboard are authorised without re-entry. | Until you sign out or revoke the key |
| avi_debug | localStorage | SkyInfo (first party) | Set by hand to turn on verbose console logging while debugging. Never set automatically. | Until you clear it |
| Google Tag Manager container | Cookie | Google Ireland Ltd. (GTM-W2XG3CG6) | Loads the measurement tags configured in our tag container. Sets no cookie of its own; the tags it loads are listed here. Not loaded at all unless you enable Analytics. | n/a |
| _ga, _ga_<id> | Cookie | Google Ireland Ltd. (Google Analytics 4) | Distinguishes visitors and sessions to produce aggregate usage statistics. IP anonymisation is on. Not loaded at all unless you enable Analytics. | Up to 2 years |
4. Third parties that can set storage
- Google Tag Manager & Google Analytics 4 (Google Ireland Ltd.) — the tag container and the measurement tag, loaded only after you enable the Analytics category. IP anonymisation is on and we have not enabled Google Signals, advertising features or data sharing for advertising.
- Google Sign-In(Google Ireland Ltd.) — used only if you choose to sign in. It sets its own cookies on Google's domains during that flow.
- PayPal — used only if you open a paid plan checkout. PayPal sets its own cookies in its own checkout window and acts as its own controller there.
- CARTO / OpenStreetMap — map tiles on the map pages. No cookies, but your IP address reaches their servers when a map loads.
- jsDelivr — serves the accessibility toolbar script. No cookies, but your IP address reaches the CDN.
5. Changing or withdrawing your choice
Use here or in the footer of any page. Withdrawing analytics consent stops the tag loading and deletes the _ga cookies it already set. You can also block or delete cookies in your browser settings; strictly necessary storage is required for sign-in, so blocking it will sign you out.
6. Questions
Write to [email protected]. See also the Privacy Policy and the Terms of Use.