Cookie Policy
- Version
- 1.0
- Effective
- 6 October 2026
- Last updated
- 6 October 2026
This page lists every cookie and browser-storage item the Retro Collection Index website uses, what each is for and how long it lasts. The iOS and Android apps do not use cookies; they keep your sign-in and preferences in the device's secure storage.
Your choices
Strictly necessary items are always on, because sign-in and security do not work without them. Analytics and advertising are off until you choose to turn them on, in the banner shown on your first visit or at any time with Cookie Preferences in the website footer. Until you accept, the Google Analytics and Google AdSense code is not loaded at all. If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising.
You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in from working.
Strictly necessary
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
__Host-authjs.csrf-token |
Us (Auth.js) | Protects sign-in forms against cross-site request forgery | Browser session |
__Secure-authjs.callback-url |
Us (Auth.js) | Returns you to the right page after sign-in | Browser session |
__Secure-authjs.session-token |
Us (Auth.js) | Keeps you signed in | Up to 30 days |
rci_device_trust |
Us | Remembers a device you chose to trust so it can skip the email code | 30 days |
rci_imp, admin_flash |
Us | Administrator tools only; never set for ordinary users | Up to 30 minutes |
| Cloudflare Turnstile | Cloudflare | Bot check on the sign-up page only; Cloudflare may store challenge data in your browser | The challenge |
Functional
These remember choices you make. They stay in your browser and are not sent to anyone.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
rci-consent |
Local storage | Your cookie choices, so we do not ask again | Until you clear it |
rci-theme |
Local storage | Light or dark theme | Until you clear it |
rci_catalog_mode, rci-value-view and similar view settings |
Local storage | How lists, grids and charts are shown | Until you clear it |
rci_app_view |
Cookie | Set when a page is opened from our mobile app, to hide links that do not apply in the app | Browser session, at most 6 hours |
| Short-lived page keys | Session storage | Avoid duplicate events and repeated reloads after an update | Until you close the tab |
Attribution
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
rci_src |
Us | When you arrive from a link carrying a utm_source tag, records that source (for example a newsletter) so we know which links bring people who sign up. It holds only the source name and is read only by our own server at sign-up |
7 days |
Analytics — only with your consent
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
_ga, _ga_<id> |
Google Analytics | Counts visits and pages viewed, so we can see how the website is used | Up to 2 years |
Our host, Vercel, also counts page views without cookies or stored identifiers. That measurement does not depend on your cookie choice.
Advertising — only with your consent
Advertising is currently paused, so no advertising cookies are set. If it resumes, Google AdSense and its DoubleClick service may set cookies such as test_cookie, IDE and __gads to deliver and measure ads to free users on wide desktop screens, and — if you accept personalised ads — to tailor them. This page will be updated before advertising resumes.
Changes
When the cookies we use change, we update this page and its version number.
Questions: support@retrocollectionindex.com. See also our Privacy Policy.