This inventory covers the website, not the Elara Health App. Local storage and session storage are similar storage technologies. Necessary website functions remain available without statistics consent.
Storage inventory
| Key / technology | Storage | Purpose | Duration / erasure |
|---|---|---|---|
elara-cookie-consent | Local Storage | Statistics choice, time, text version and expiry | 180 days; a new decision is then required |
elara-preferences | Local Storage | Requested accessibility settings such as text size | Until changed or cleared in the browser |
elara-education-progress-v1 | Local Storage | Last-opened and explicitly completed lessons. Local without a linked account; synchronized at Supabase with a website account, existing browser progress is transferred only after selecting “Add browser data”. Not used for website analytics. | Until reset, detected sign-out/account switch or clearing browser data; account copy until reset or account deletion |
elara-progress-nudge-dismissed-at | Local Storage | Remembers that you dismissed the suggestion to save learning progress in your account | Suppresses the prompt for 30 days; the entry remains until browser data is cleared |
elara-lesson-feedback:* (Altbestand / legacy) | Local Storage | Former marker for lessons already rated; new feedback no longer sets it | Removed on the next visit to a lesson with feedback, or when browser data is cleared |
elara-guide-saved-v1 / elara-saved-content-v1 | Local Storage | Saved Guide, laboratory and lesson items; synchronized at Supabase when linked to a website account | Until removal, detected sign-out/account switch or clearing browser data; account copy until removal or account deletion |
elara-account-link-v1 | Local Storage | Opaque browser/account association for synchronization, not a sign-in token | Until detected sign-out, account switch or clearing browser data; no automatic cleanup without another visit |
elara-health-saved-results | Local Storage | Maps local questionnaire results to results voluntarily saved in an account; contains no answers | Until cleanup or browser data are cleared |
elara_pem_diary_v1 | Local Storage | PEM diary entries (day, energy, exertion, symptoms, crash, note), encrypted with the local key below; never sent to Elara, not used for website analytics | Until deleted on the page or browser data are cleared; entries older than two years are removed on the next save |
elara-guide-notifications-seen-v1:* | Local Storage | Time of the most recently seen community notification per website account | Until browser data are cleared |
elara-sw-cleanup | Local Storage | Remembers cleanup of an earlier service worker | Until cleared in the browser |
questionnaire_results_* | Session Storage | Encrypted local answers and results | Valid for 30 minutes; removed on subsequent access / cleanup or at the end of the tab session |
care_story_draft_v2 | Local Storage | Encrypted, unsent draft of your care experience; not transmitted to Elara before submission | Restorable for seven days; deleted on submission, discarding or on the next form visit after expiry |
__elara_local_encryption_key_v1 | Local Storage | Local key used to reopen the encrypted care-experience draft and PEM diary entries; contains no content itself and does not protect against others using the same browser profile | May remain after the draft or diary is deleted; until browser data are cleared |
elara-guide-review-handoff | Session Storage | Temporary text when moving to the Guide review form (not encrypted) | Consumed once; after 15 minutes on the next access or when the tab session ends |
elara-account-setup | Session Storage | Remembers that account setup was completed or postponed in this tab | Until the tab session ends or it is reset |
__elara_session_encryption_key_v1 | Session Storage | Local key to reopen questionnaire results and article drafts after reload; stored in the same browser and does not protect against others using that profile | Tab session; may be affected by browser session restoration |
elara-guide-article-draft:secure:v2:* | Session Storage | Encrypted recovery of a long-form contribution draft, bound to an opaque account identifier; consent is not restored | Valid for 24 hours after the last save; checked/removed on subsequent access, detected sign-in changes or successful save/withdrawal. Browser restoration can retain the tab session. |
guide_session | Cookie (HttpOnly) | Necessary signed website session; contains account ID, derived pseudonym and email address, no health scores; valid only on this website | Up to seven days, or sooner on sign-out/session deletion |
guide_signed_in | Cookie | Non-authenticating sign-in hint for the account menu; contains only the value 1, no session token or name | Up to seven days, or sooner on sign-out |
__ph_opt_in_out_* | Local Storage | Technical opt-in/out state of the optional statistics SDK; not a usage profile | Until changed or cleared; not sufficient consent by itself; elara-cookie-consent is authoritative |
PostHog analytics identifier | Memory only | Limited pseudonymous statistics after consent | Current page load; no persistent analytics identifier in cookies or local storage |
Encrypted local drafts are not automatically anonymous: the decryption key is held on the same device. Someone who can use a shared browser or run scripts on this website may be able to bypass this separation. Discard sensitive drafts before sharing a device and clear browser data where needed. Expiry after seven days does not itself remove a draft until you next open the form.
Statistics only after affirmative consent
PostHog loads only after consent. A central check drops analytics events without current consent or from sensitive sections, including questionnaires and forms. Only general website sections and allowed app-link clicks are captured. Automatic click capture, session replay, performance measurements, questionnaire answers and detailed health-page URLs are excluded.
Older PostHog and Google Analytics identifiers are removed from the browser where possible. Google Analytics and Google Tag Manager are not used for website analytics. Technical connection data exchanged with providers are distinct from browser storage.
Choice and withdrawal
“Necessary only” is as directly available as acceptance. You can change or withdraw your choice through “Cookie Settings” in the footer. The current decision is checked before each analytics event and respected across open tabs of the same site. Old, corrupt or expired choices do not enable statistics. If a choice cannot be saved, statistics stay off in that tab.
Legal bases and contact
Storage access strictly necessary for explicitly requested functions relies on Section 25(2)(2) TDDDG. Optional statistics requires consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Further information about personal data, providers and your rights is in the Privacy Policy.
Last updated: 26 October 2026