Skip to content
← Home

Cookie Policy

Version
1.0
Effective
6 October 2026
Last updated
6 October 2026

This page lists every cookie and browser-storage item the Retro Collection Index website uses, what each is for and how long it lasts. The iOS and Android apps do not use cookies; they keep your sign-in and preferences in the device's secure storage.

Your choices

Strictly necessary items are always on, because sign-in and security do not work without them. Analytics and advertising are off until you choose to turn them on, in the banner shown on your first visit or at any time with Cookie Preferences in the website footer. Until you accept, the Google Analytics and Google AdSense code is not loaded at all. If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising.

You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in from working.

Strictly necessary

Name Set by Purpose Lasts
__Host-authjs.csrf-token Us (Auth.js) Protects sign-in forms against cross-site request forgery Browser session
__Secure-authjs.callback-url Us (Auth.js) Returns you to the right page after sign-in Browser session
__Secure-authjs.session-token Us (Auth.js) Keeps you signed in Up to 30 days
rci_device_trust Us Remembers a device you chose to trust so it can skip the email code 30 days
rci_imp, admin_flash Us Administrator tools only; never set for ordinary users Up to 30 minutes
Cloudflare Turnstile Cloudflare Bot check on the sign-up page only; Cloudflare may store challenge data in your browser The challenge

Functional

These remember choices you make. They stay in your browser and are not sent to anyone.

Name Type Purpose Lasts
rci-consent Local storage Your cookie choices, so we do not ask again Until you clear it
rci-theme Local storage Light or dark theme Until you clear it
rci_catalog_mode, rci-value-view and similar view settings Local storage How lists, grids and charts are shown Until you clear it
rci_app_view Cookie Set when a page is opened from our mobile app, to hide links that do not apply in the app Browser session, at most 6 hours
Short-lived page keys Session storage Avoid duplicate events and repeated reloads after an update Until you close the tab

Attribution

Name Set by Purpose Lasts
rci_src Us When you arrive from a link carrying a utm_source tag, records that source (for example a newsletter) so we know which links bring people who sign up. It holds only the source name and is read only by our own server at sign-up 7 days

Analytics — only with your consent

Name Set by Purpose Lasts
_ga, _ga_<id> Google Analytics Counts visits and pages viewed, so we can see how the website is used Up to 2 years

Our host, Vercel, also counts page views without cookies or stored identifiers. That measurement does not depend on your cookie choice.

Advertising — only with your consent

Advertising is currently paused, so no advertising cookies are set. If it resumes, Google AdSense and its DoubleClick service may set cookies such as test_cookie, IDE and __gads to deliver and measure ads to free users on wide desktop screens, and — if you accept personalised ads — to tailor them. This page will be updated before advertising resumes.

Changes

When the cookies we use change, we update this page and its version number.

Questions: support@retrocollectionindex.com. See also our Privacy Policy.