Cookies, storage and language

We select an initial language from your browser’s language setting without an external IP-location lookup. Optional preferences are not saved until you allow them below. This choice applies separately on timbrii.com and timbrii.com.br.

Remember my preferences

Optional storage is off until you allow it. Allowing it lets this browser remember your language, theme, display mode, previous page and declared playlist owner name. These values stay on this site’s browser storage; language is also sent to this site in a cookie. Your choice lasts 180 days on this domain.

You can use these controls without remembering them across visits. Declining clears saved optional values and stops reading or saving them. It does not sign you out. Advertising and analytics are not included.

Preference storage is off.

Storage used by this site

Sign-in and security: authjs.session-token (and __Secure-authjs.session-token on HTTPS) cookies keep you signed in for up to 30 days, renewed through active use. CSRF cookies (authjs.csrf-token or __Host-authjs.csrf-token) and callback-url cookies (authjs.callback-url or __Secure-authjs.callback-url) last for the browser session; OAuth state, PKCE and nonce cookies (authjs.pkce.code_verifier, authjs.state, authjs.nonce, with __Secure- prefix on HTTPS) last up to 15 minutes when used. HTTPS cookies use Secure, HttpOnly and SameSite=Lax. Signing out clears the session token.
Shared sign-in: soundlog-sso-checked is only written when you request authentication (/login), lasting one hour (or cleared on sign-out) to prevent repeated sign-in handshake loops between timbrii.com and timbrii.com.br. Anonymous browsing and unknown paths never initiate cross-domain handshakes or write this cookie. An encrypted, single-use ticket in the transfer URL expires after 30 seconds; it is not a browser cookie. Administrator access uses an admin_unlock cookie for 15 minutes.
Your storage choice: timbrii-preferences-v1 records allow or deny for 180 days. This necessary preference-control cookie does not contain a user identifier.
Only if allowed: soundlog-user-language stores your explicit language choice in a cookie for up to one year and in local storage. theme stores light, dark or system; timbre-ui-storage stores display mode; soundlog:playlist-owner: followed by the service stores a name you entered, not proof of account ownership. Local values remain until cleared, but we stop reading them when permission expires and clear them on your next visit.
Only if allowed: timbrii:prev-path stores the previous page path in session storage for the life of the tab to help label Back buttons. It is not an analytics history.

Auth.js is software operated by Timbrii, not a separate cookie recipient. A Google sign-in you choose opens Google, whose own storage and notice apply there. Our hosting service processes requests to deliver the site. This inventory describes Timbrii’s storage, not third-party websites you choose to open.

Browser settings can remove all site storage; removing authentication cookies signs you out. Optional advertising or analytics require a separate review and applicable permission before activation.