Skip to main content
Log in

Cookie Notice

Manage your optional privacy choices, or read how cookies and browser storage work below.

Version 1.3.0

Cookie and Device Storage Notice Version 1.3.0 · 24 September 2026

1. Operator and scope

Nikali Ltd., UIC 207724645, VAT BG207724645, 8 Belite Borove St., Gorna Banya, Sofia, Bulgaria, operates WeekBuffer. Privacy contact: privacy@weekbuffer.com. This notice covers cookies, local storage, session storage, IndexedDB and cached application assets on https://weekbuffer.com. The Privacy Notice explains the broader handling of personal data.

2. Necessary authentication and security

Supabase's authentication SDK stores the signed-in session and refresh information in browser local storage, using a project-specific authentication key. It may also store a temporary PKCE verifier for an email authentication flow. These support the sign-in you request; they are not analytics identifiers. Session tokens expire and refresh under the authentication configuration. Signing out removes the local session, while revoking other sessions stops their server authority. Clearing this site's storage signs you out and can remove unsubmitted work. An email link may need to be opened in the browser where you requested it.

Infrastructure may use necessary request/security mechanisms to deliver the website and resist abuse. This is not permission for optional host analytics. Unless you choose Analytics, WeekBuffer blocks the host-injected analytics script and removes its session-id cookie/local-storage keys; this does not assert deletion of information a provider already received.

3. Functional storage you request

Stress Test draft: this browser keeps your week, time zone, work/care windows, travel assumptions, assignments and backup states for up to 24 hours from starting. Editing does not extend the expiry. The record does not contain a tracking identifier and is not your result history. Clear my answers removes it sooner; confirmed import into an account removes the matching draft. Expired bytes are removed when the app next runs and while it remains open. A closed browser cannot run that cleanup. On a shared device, clear answers when finished. With storage blocked, the test can operate in the current tab without reliable resume after refresh.

Currency: explicitly selecting EUR, GBP, USD or AUD stores only the choice and expiry for up to 180 days. Use suggested currency removes the preference. A suggested currency is not saved until selected and does not establish tax residence.

Rehearsal capture: an account-bound IndexedDB queue can hold unsynchronized operational observations for up to 24 hours from the first pending write, shortened by known access expiry. Successful synchronization, finalization, sign-out or account change clears relevant pending rows. Expired records are removed before reuse. Offline storage is not a backup of the entire family plan.

Application cache: the service worker caches selected static application/offline files and versioned assets. It does not cache private household plans or authenticated API responses as offline assets. Browser eviction, application updates or clearing site data removes cached files; there is no fixed lifetime for every static asset.

4. Privacy choices

The first-party key weekbuffer.privacy-choice.v1 records this notice version, the time of the choice and Necessary, Analytics and Marketing categories. It has no visitor identifier or fingerprint. It lasts until changed, cleared or invalidated by a notice-version change. If browser storage is unavailable, choices can operate for the current visit in memory. Account choices have separate versioned evidence; anonymous browsing history is not attached to an account when you sign in.

Necessary functions remain enabled. Analytics and Marketing default off. Accept all and Reject non-essential are equally accessible. You can reopen Privacy choices from any page and withdraw optional choices. Rejecting them does not remove paid features. Withdrawal stops future optional processing; it cannot recall a message already handed to an email provider.

5. Optional services and third-party pages

Analytics (optional, off by default): if you are not signed in and choose Analytics or Accept all, public pages load Lovable Analytics, the visitor measurement of our hosting provider Lovable Labs Incorporated, through a same-site script and proxy (/~flock.js, /~api/analytics). It counts page views and records the page path, referring source, device type, browser, approximate country derived from the request, and visit duration, using a session-id cookie/local-storage value. WeekBuffer stores the first-party cookie wb_analytics (value 1, up to 180 days) so our server can allow this script only for you. It never runs on account, sign-in, sign-up, checkout, privacy, internal or care-request pages, and never for signed-in accounts; signing in removes wb_analytics. It does not receive family planning details, and results are only shown to us as aggregate statistics. Choosing Reject non-essential or withdrawing Analytics removes wb_analytics and session-id and blocks the script from the next page load. Lovable retains the statistics under its own terms. No advertising pixel or marketing tracking provider is enabled; a Marketing choice does not activate one. We do not use family planning details to build advertising audiences.

If you deliberately leave WeekBuffer for Google authorization or Stripe/Link checkout, those services control their own page storage and display their own notices. Their separate pages are not represented as first-party WeekBuffer cookies, and visiting them is not a grant of WeekBuffer marketing consent.

6. Managing storage and notice changes

Use Privacy choices for optional categories and your browser settings for all site data. Blocking authentication or requested functional storage may prevent sign-in or resuming work. Deleting browser storage does not delete your server account, cancel a purchase or erase records held by another provider. Use the Privacy Center for those data requests. New purposes or materially different storage require an updated notice and any consent the law requires.

Your temporary Stress Test answers and result

To resume the test you requested, this browser stores a versioned draft of your operational answers for up to 24 hours from when you start. It contains the selected week, time zone, work and care windows, handoff assumptions and backup states. It contains no analytics identifier, advertising profile or device fingerprint.

The draft expires without extending its lifetime when you edit it. WeekBuffer removes an expired draft when you open the app and while it is open. Use “Clear my answers” in the test to remove it sooner. A confirmed import into your account also removes the matching draft. Closing your browser does not clear it; on a shared device, clear your answers when finished.

This functional storage does not depend on Analytics or Marketing choices. If storage is blocked, the test works in the current tab, but answers cannot be recovered after refresh. The latest result is kept with the draft for the same remaining time, so reloading does not lose it. Editing or clearing answers removes the old result.

Your currency choice

When you choose EUR, GBP, USD or AUD, this browser stores only that choice and its expiry for up to 180 days. This preference keeps prices in your chosen currency; it is not an analytics identifier and does not establish your tax location.

Use “Use suggested currency” beside any price selector, or clear this site’s browser storage, to remove the preference. If storage is blocked, you can still choose a currency for the current visit. A suggested currency is not saved until you explicitly choose it.