1. Summary
This website sets no cookies and runs no analytics, advertising, or tracking. It loads no third-party fonts, images, scripts, or embeds. All assets are served from this site.
The Eva Store app and API use bearer tokens rather than cookies for authentication. The app stores only the refresh token on the device, in the platform keystore/keychain.
2. This website
- No cookies, no localStorage, no sessionStorage, and no JavaScript.
- No analytics, advertising pixels, heatmaps, A/B testing, or crash-reporting scripts.
- No external fonts or CDNs. The logo and stylesheet are local files.
- Standard server access logs may record your IP address, user agent, requested URL, timestamp, and response status. The hosting provider and the log retention period are [OWNER/LEGAL APPROVAL REQUIRED].
3. The app and API
- The app authenticates with Supabase Auth and sends a bearer access token to the Eva Store API. It does not use a cookie for API authentication.
- The refresh token is kept in the device's secure storage; Android app backup is disabled. Signing out revokes the session.
- The app includes no third-party advertising or analytics SDK. The backend may use OpenTelemetry for operational tracing and metrics when configured; that is not used for advertising.
- Firebase Cloud Messaging delivers push notifications. It receives the device push token and notification content, not a cookie.
4. Third-party pages and flows
Some actions open a third-party page or flow: Google or Apple sign-in, a payment provider's checkout page, or a link you choose to open. Those services may set their own cookies and collect data under their own policies. Eva Store does not control them. Review their notices before using them.
5. How to control cookies
Because this site sets no cookies, there is nothing to clear here. You can still manage cookies globally in your browser settings and block third-party cookies. Blocking cookies may affect third-party sign-in or payment pages, but it does not affect this static site.
6. Changes and contact
If the operator later adds cookies or analytics, this page will be updated before they are used, with the purpose, provider, duration, and legal basis. Questions: use the in-app support conversation. A public contact for this website is [OWNER/LEGAL APPROVAL REQUIRED].