Current storage map
| Technology | Purpose | Duration | Essential |
|---|---|---|---|
ares_session cookie | Passwordless account session; HTTP-only, Secure, SameSite=Lax. | Up to 30 days unless revoked. | Yes, for signed-in features. |
| Analytics sessionStorage | Temporary anonymous first-party session identifier used to group governed events. | Until the browser tab/session ends. | No; suppressed when applicable privacy signals are respected. |
| Consent-choice localStorage | Remembers whether optional measurement and advertising storage was accepted or rejected. | Until cleared or the consent version changes. | No. |
| Optional measurement storage | Measures site use after consent. The external measurement service may set identifiers or cookies according to the granted choice. | Varies by technology and provider policy. | No; denied by default. |
| Other interface localStorage | May preserve non-sensitive display or navigation preferences implemented by the public interface. | Until cleared. | No. |
2. sessionStorage
The first-party analytics runtime may generate a random identifier in sessionStorage. The identifier is temporary, is not an email address, and is not shared with third-party advertising pixels. It supports privacy-limited measures such as page views, engagement, ranking opens, watchlist activity, account conversion, and newsletter conversion.
3. localStorage
ARES may use localStorage for interface state that does not require server storage, including acknowledgement of the current policy-change notice. Clearing localStorage resets those local preferences but does not delete a server-side account, watchlist, newsletter record, or legal request.
4. Privacy signals and controls
Optional measurement and advertising storage begin in a denied state. You can accept or reject them from the sitewide notice and reopen Privacy choices from the footer. You can also clear ARES cookies and storage through your browser. Clearing the authentication cookie signs you out; clearing sessionStorage starts a new anonymous analytics session; clearing localStorage resets privacy and interface preferences.
5. External providers
ARES loads an external measurement service under consent controls. Following a link to Substack, an email provider, a source website, or another external service may also cause that provider to use its own cookies or storage under its own policy. ARES does not control storage created after you leave the ARES domain.
6. Changes
If ARES introduces materially different cookies, advertising delivery, or browser storage, the policy register and public disclosure must be updated before production use. Where legally required, the consent controls will be updated and renewed choices requested.