Cookies and browser storage

Aggregate visit statistics

The library measures successful visits to public pages to understand use and improve the service. It records daily page views, visits separated by 30 minutes of inactivity, daily measured browsers and totals per public page. A browser is not a person: multiple devices, deleted or blocked cookies and undetected automation can affect counts. History starts when measurement is activated; earlier traffic is not reconstructed. Administration, sign-in, private pages, recognised robots and prefetch requests are excluded.

This first-party counter uses __Host-utopia-stat, a random Secure, HttpOnly, SameSite=Lax cookie lasting at most 24 hours and rotated at the UTC day boundary. A daily hash and last-seen time prevent duplicate counting; these keys are not linked to accounts or page histories, and are excluded from backups. Keys older than 24 hours are removed during counting, report access and daily maintenance; cleanup can be delayed if all these operations are unavailable. Aggregate daily totals are retained for historical comparison. No IP addresses, browser fingerprints, search queries, referral URLs, email addresses or advertising identifiers are stored in these statistics. No Google Analytics or external advertising tracker is used. Hosting providers process technical requests under their own policies.

The purpose is limited first-party aggregate audience measurement, based on the operator’s legitimate interest in understanding service use, without individual profiling or cross-site advertising. You can exclude this browser below without losing any library feature. The exclusion cookie utopia_stats_optout lasts one year; deleting it removes that preference. Do Not Track and Global Privacy Control signals are also respected. Changing the preference affects future visits, not existing aggregate totals. Counts are visible only to the administrator.

Language cookie

utopia_language is a first-party preference cookie. It remembers the selected interface language so server-rendered pages and the library use the same preference. Its configured lifetime is one year (31,536,000 seconds), refreshed when the preference is saved, with Path=/ and SameSite=Lax. It contains a language code, not your book content or payment data. It is not used for advertising profiling.

Local storage and reading preferences

Local storage keeps the interface language (agora.ui.language and a compatibility language key) and the focused reader’s text size, theme, column width and explicitly saved paragraph bookmark. Reading preferences and bookmarks are separated for guests and signed-in accounts on this browser and website address. They are not a copy of the book and are not synchronized between devices or domains. Local storage has no automatic expiry set by this application; it remains until removed by the feature, browser or user.

Draft and request recovery

Session storage holds text drafts and original request references for the current tab and account, so an uncertain submission can be checked instead of duplicated. It may include the request’s text, selected service, amount and public book or logo details. It does not store payment credentials or the selected PDF/EPUB and cover file binaries. Browser session restoration may preserve it beyond closing a tab. Clearing it can remove recovery information before a server result is reconciled; first inspect your saved books, orders or tickets.

Google and email sign-in

When you choose Google or email sign-in, Firebase Authentication stores authentication state in this browser so you can stay signed in. The library uses the marker utopia-external-auth and a Secure, HttpOnly, SameSite=Lax cookie named __Host-utopia-auth containing a signed ID token, valid for at most one hour and refreshed only while you remain signed in. These are authentication mechanisms, not advertising or analytics. Signing out clears this library session and the Firebase browser session. Provider revocation may take up to the token expiry to reach an existing library session. No password or refresh token is saved in the library database.

Authentication, third parties and consent

Native Sites / ChatGPT authentication and hosting may use their own security or session mechanisms, described by those providers. Stripe checkout and external bookshops open separate services with their own storage policies. The application has not added marketing pixels or behavioural advertising analytics. Functional storage is explained here; adding non-essential tracking would require a new assessment, clear information and prior consent where required, before activation. A link to an external service is not consent to optional tracking there.

Your controls

Use the language selector and reader controls to change preferences; Remove bookmark clears the saved position. Your browser can inspect, block or delete this site’s cookies and storage. Blocking them may reset language choices, prevent draft recovery or affect sign-in. Deleting browser storage does not delete records already saved in your account. For account data use the export and private deletion-request tools or contact the operator. Anyone with access to your browser profile may be able to inspect its local data.