| arbitrer_cookie_consent | Necessary | Cookie or localStorage | Arbitrer | Stores consent choices, banner version, and timestamp. | Up to 180 days |
| arbitrer_session / auth token patterns | Necessary | Cookie or localStorage | Arbitrer / auth provider | Keeps authenticated users signed in and secures dashboard access. | Session to 30 days |
| route_recovery / lazy_reload flags | Necessary | sessionStorage | Arbitrer | Prevents route recovery loops after chunk load failures. | Session |
| dashboard_preferences | Preferences | localStorage | Arbitrer | Stores UI state such as dismissed panels, dashboard choices, and local preferences. | Until cleared |
| referral_code / utm_* | Analytics | sessionStorage or localStorage | Arbitrer | Attributes signup source, campaign, partner, or franchise relationship. | Session to 90 days |
| Vercel Analytics identifiers | Analytics | Cookie or script event | Vercel | Measures page views and aggregate product performance. | Provider controlled |
| Vercel Speed Insights identifiers | Analytics | Script event | Vercel | Measures web vitals and performance issues. | Provider controlled |
| ph_* PostHog identifiers | Analytics | Cookie or localStorage | PostHog (EU region) | Records session replays of page content and on-screen activity, plus which pages are visited, so Arbitrer can see how the product is used and diagnose issues. Passwords and access tokens are never recorded. | Provider controlled |
| support or monitoring identifiers | Necessary / Analytics | Cookie or localStorage | Arbitrer or support provider | Helps diagnose errors, abuse, incidents, and support tickets. | Provider controlled |
| future marketing pixels | Marketing | Cookie or script event | Advertising provider | Only used if Arbitrer activates advertising and obtains required consent. | Provider controlled |