Category: Strictly necessary
What: Firebase Authentication storage (IndexedDB/localStorage), session and preference keys (theme, onboarding, guest Pro flag)
Provider: LensScape / Google Firebase
Purpose: Sign-in, security, remembering your choices
Duration: Until sign-out or cleared
Consent needed?: No
Category: Strictly necessary
What: Stripe Checkout cookies (on Stripe's pages)
Provider: Stripe
Purpose: Payment and fraud prevention
Duration: Per Stripe
Consent needed?: No
Category: Analytics
What: _ga, _ga_<ID>
Provider: Google Analytics 4 (G-NXVD7NXT1Q)
Purpose: Count visits and page views, understand site use
Duration: Up to 2 years
Consent needed?: Yes (EU/UK, Quebec; best practice elsewhere)
Category: Hosting logs
What: No cookie; IP and request logs
Provider: Vercel
Purpose: Delivery and security
Duration: Per Vercel
Consent needed?: No
Category: Advertising
What: None on the website today (web ads are disabled)
Provider: n/a
Purpose: n/a
Duration: n/a
Consent needed?: n/a