Cookies and storage
Version 7 · Updated 25 September 2026
What SAFE stores or accesses on your device, how long it lasts and how to change your choices.
On this page
Your display choices
Your navigation layout, map style, area units and introduction choice are kept in this browser for up to 180 days, so SAFE opens the way you left it. Turning remembering off removes the persistent copies and keeps the current visit’s choices.
On unless you turn it off. Your navigation layout, map style, area units and introduction choice are kept in this browser for up to 180 days.
Display choices and analytics have separate controls. SAFE remains available if you leave both off.
Usage analytics
Analytics measures visits and a limited set of actions to help us improve SAFE. It is on unless you turn it off, here or on the notice shown on your first visit. Random identifiers distinguish browsers and visits; they do not make the information anonymous. We do not use analytics to identify you, and never for advertising.
SAFE’s measurement events exclude project answers, uploaded content, email addresses and site coordinates. Google Analytics receives only the type of page you view, such as “a SAFE”. PostHog also receives the address of the page, without anything after a “?”. That address contains the reference of the SAFE, project or site you view. PostHog also receives which Topics and Evidence items you open in a SAFE. Advertising permission is denied and SAFE does not use session replay.
Turning analytics off stops further measurement and removes SAFE’s analytics cookies and browser storage. It does not delete information already collected. Each provider’s settings for retained user and event information are separate from cookie expiry, and aggregate reports can remain longer. See the privacy notice or contact privacy@sandbox.land about previously collected information.
Help improve SAFE
On unless you turn it off. SAFE works fully with analytics off. We use Google Analytics and PostHog to measure how SAFE is used so we can improve it. Each receives a random browser identifier, technical details including your approximate location, and limited usage events. We exclude project answers, uploaded content, email addresses and site coordinates. PostHog also receives the addresses of the pages you view, which contain SAFE, project and site references, and which Topics and Evidence items you open. We do not use analytics to identify you, and we do not enable advertising or session replay.
Analytics is on. You can turn it off here at any time.
| Item and purpose | Duration and choice |
|---|---|
Usage measurement Cookie Measures use of SAFE through Google Analytics, unless you turn analytics off. Random browser and session identifiers; no project answers or site geometry. | Up to 180 days, without extending expiry on each visit. Removed when analytics is turned off. Unless you turn analytics off. |
Usage measurement Browser storage Measures use of SAFE through PostHog, unless you turn analytics off. Random browser and session identifiers, and the date measurement began; no project answers, site geometry or page addresses. On a SAFE team member's own browser this also holds their account identifier, which marks their use as internal testing so it can be excluded from measurement. | Up to 180 days from when measurement began, without extending on each visit. Removed when analytics is turned off, or when SAFE next loads after expiry. Unless you turn analytics off. |
Usage measurement in this tab Browser session storage Keeps PostHog's measurement of this tab together, unless you turn analytics off. A copy of the measurement identifiers for this tab and random tab identifiers; no project answers, site geometry or page addresses. | Until the tab is closed. Removed sooner when analytics is turned off. Unless you turn analytics off. |
Storage needed for SAFE
These items maintain sign-in, unfinished work, invitations, privacy choices and the map position in an open tab. We use them to provide those requested features without a separate optional-storage choice.
| Item and purpose | Duration and choice |
|---|---|
Saving work through sign-in Cookie Keeps unfinished work connected to this browser while you sign in and choose where to save it. A protected sign-in handover reference. | Up to seven days to finish signing in. Saving requires a recent verified sign-in. This does not set how long the draft is retained. Used to provide the feature you request or remember your privacy choices. |
Current SAFE in this tab Browser session storage Reopens the SAFE you are working on in this tab. A draft reference for the signed-in account. | Until the tab is closed. Used to provide the feature you request or remember your privacy choices. |
Project invitation Cookie Keeps an invitation available while you sign in to accept it. A reference to the invitation you are accepting. | Up to 15 minutes, or until you accept the invitation. Used to provide the feature you request or remember your privacy choices. |
Sign-in and unfinished work Browser storage Keeps you signed in, and keeps the working session that lets you come back to an unfinished SAFE. Sign-in information and basic account details, including your email if you have registered. | Until you sign out or clear browser storage. Sign-in validity can end earlier; this does not set the retention period for your project. Used to provide the feature you request or remember your privacy choices. |
Staff sign-in Browser storage Keeps authorised staff signed in to SAFE Operations separately from their project session. Staff sign-in information and basic account details. A related temporary entry connects the browser to its Workspace sign-in attempt. | Sign-in information remains until staff sign out or clear browser storage. Workspace access can expire sooner. The temporary sign-in entry is removed when the sign-in exchange completes; an abandoned entry can remain until replaced or browser storage is cleared. Used to provide the feature you request or remember your privacy choices. |
Privacy choices Cookie Remembers that you have seen the privacy notice, and your separate choices to keep or turn off remembered display choices and analytics. Your separate choices, their date and the version of the purposes you were shown. | 180 days from your last change to the setting. Used to provide the feature you request or remember your privacy choices. |
Map position Browser session storage Keeps the map where you left it while this tab is open. The map's centre and zoom. | Until you close the tab. Used to provide the feature you request or remember your privacy choices. |
Display storage
Cookies expire automatically. Display choices in browser storage expire after at most 180 days and are removed when SAFE next reads them. Clearing browser storage removes them sooner.
| Item and purpose | Duration and choice |
|---|---|
Area units Browser session storage Shows site areas in your chosen units. Your preferred unit for areas. | For this visit; up to 180 days from your choice if remembering is on. Removed when you turn remembering off, or when SAFE next checks it after expiry. Remembered between visits unless you turn remembering off. |
Introduction Cookie Remembers that this browser has seen the SAFE introduction. Whether you have seen the introduction. | For this visit. With the setting on, for 180 days from the time you last chose Start or Skip introduction. Remembered between visits unless you turn remembering off. |
Navigation layout Cookie Remembers whether you keep the navigation expanded or compact. Your navigation layout. | For this visit. With the setting on, for 180 days from the time you last changed the navigation layout. Remembered between visits unless you turn remembering off. |
Map style Browser storage Remembers the map style you chose. Your chosen map style. | For this visit; up to 180 days from your choice if remembering is on. Removed when you turn remembering off, or when SAFE next checks it after expiry. Remembered between visits unless you turn remembering off. |
Maps and location
Mapbox supplies the map and location search. It receives your IP address, map requests for the areas you view and the locations you search for. Map usage information is separate from optional analytics.
The map stores a changing browser identifier and saves map images to help them load faster. SAFE disables optional map performance reporting. Mapbox’s privacy policy explains its processing and retention.
| Item and purpose | Duration and choice |
|---|---|
Map usage Browser storage Records map usage to provide the mapping service. A browser identifier and usage dates. The identifier changes daily and does not contain your name. | Until the browser clears it. The identifier changes daily. Used when the map opens; separate from optional analytics. |
Saved map images Browser cache storage Stores map images you have already seen so the map loads faster. Map images and styles for the areas you viewed. | Until the saved images expire or the mapping service clears them to make room. Used when the map opens; separate from optional analytics. |
Use my location runs only when you request it and your browser permits it. You can change that permission in your browser or device settings.
Security and sign-in services
Security checks
These checks run when you start a working session, ask for a sign-in code or request early access. Cloudflare Turnstile provides this service. Checks for automated abuse using information such as your IP address and browser signals. Cloudflare also describes using signals to improve Turnstile. These checks can access device information even when they do not set a cookie.
Sign-in and saved work
Account services are used when SAFE saves your work or signs you in. Supabase provides this service. Provides accounts and saves your work. It receives the information needed for those requests, including your IP address.
Security checks protect requested actions such as signing in and saving work. Cloudflare’s Turnstile privacy notice describes its handling of security signals.
If you choose Google or Microsoft sign-in, that provider’s own site and privacy choices also apply.
Removing stored information
Use the controls above to withdraw optional permission. Your browser settings can remove cookies, browser storage and cached maps. Signing out removes SAFE’s stored sign-in session.
Clearing device storage does not delete projects, submissions or information already received by a provider. It can prevent you from returning to work saved before registration. For deletion requests and other rights, read our privacy notice.