Legal
Cookies & storage
How browser storage works
Modern web platforms use two kinds of small client-side stores:
localStorage— persists across sessions on the same device until cleared.sessionStorage— clears when the browser tab is closed.
Aura Glossy does not use traditional HTTP cookies for tracking. Firebase Authentication uses one cookie-like session ID for sign-in, and that's it.
Keys we set
Essential (always set)
aura_lang— your selected interface language (en / es / ar / he). localStorage.aura_intro_seen— flag so the cinematic intro doesn't replay every visit. localStorage.aura_cookie_ok— your acknowledgement of this notice. localStorage.aura_uid— anonymous local ID for guest moodboard cache (only set if you save before signing up). localStorage.
Only if you sign in
aura_has_session— fast-path flag so protected pages don't blank-screen waiting for Firebase. localStorage.aura_quiz_id— your current aesthetic, used to personalize your experience. localStorage.aura_onboarded— flag so the welcome tour doesn't replay. localStorage.- Firebase auth session — managed by the Firebase Authentication SDK in IndexedDB. Required for sign-in to persist across tabs and browser restarts.
Per-session helpers (cleared when you close the tab)
aura_skip_intro— skips the intro after sign-in.aura_just_authed— tells the homepage you just signed in (uses a longer auth-check timer).aura_onboard_trigger— set after a brand-new account signup so the welcome tour runs.aura_pending_action— temporary record of a save / shop / quiz click so we can resume it after sign-up.
Third-party
The only third-party storage Aura Glossy depends on is Google Firebase Authentication (Google's own session cookies). We do not load Google Analytics, Facebook Pixel, advertising trackers, or A/B testing tools. When you click a "Shop now" link, the retailer's own cookies apply on the retailer's site — Aura Glossy can't see or set them.
Clearing storage
You can clear Aura Glossy's local storage at any time via your browser's settings (Site Data → auraglossy.com → Clear). Signing out also clears the session keys.
Why we don't ask for fancy consent
EU and Israeli rules require consent for non-essential tracking. Since Aura Glossy uses only essential storage to make the platform work (language, sign-in state, onboarding), no separate analytics consent is needed. We surface this page in our footer and show a small acknowledgement banner on first visit out of respect for transparency.