FOURAPI / LEGAL INFORMATION
Cookies & browser storage
Cookies, session information and browser storage.
Updated 1 November 2026
Essential account storage
The Supabase SDK stores the FourAPI session in sessionStorage for this browser tab, under a FourAPI-specific storage key. This allows normal navigation and refresh without repeatedly signing in. Signing out clears the portal session; closing the tab normally clears sessionStorage. If the browser denies storage, the portal falls back to page memory. Access and refresh tokens are essential authentication information; the portal does not put them into analytics or advertising storage.
Invitation, recovery and older verification links can briefly contain a verifier or session data in a URL fragment. The application removes invitation verifiers from the visible address before verification. Never share these links. Owner actions require authenticator verification; deleting an account requires password reconfirmation. Browser restoration behaviour and provider-managed infrastructure storage have separate effects.
Public forms and optional tracking
Application/contact forms load Cloudflare Turnstile to protect submission endpoints. Its script and iframe perform a security check; the server validates the returned token before saving the form. This is separate from marketing or audience analytics. No analytics or advertising tracking is included. Fonts, logo and the Supabase SDK are served with the website; Turnstile is the external security script loaded on public forms.
Use browser controls to clear cached files or site data. Signing out or clearing storage does not delete database records, documents saved by your own application, or downloaded results. Account deletion and privacy requests are explained in the privacy notice. The main FourPoint website has its own storage notice.