What this browser remembers.

What do we mean by storage?

Cookies, local storage, session storage and IndexedDB are different ways a website can store or read information on your device. This notice covers all of them.

The reviewed ListOnce application has no advertising or analytics scripts. The anonymous beta browser check observed the ListOnce session cookie and Cloudflare security cookies described below. Owner sign-in and external sites have separate storage.

Saved items: your working library

Save now sends the working item details and listing text to your private server library. Choose the photograph checkbox to include resized photographs. This cloud save is not browser storage. The older listonce-drafts browser database may still contain copies you saved before this change; those are shown separately as older items on this device.

Use the same account, or the same private beta link, to access cloud drafts on another device. Anyone with a beta link shares that link’s saved drafts. Older local copies can be visible to people using the same browser profile and do not sync. Finished — delete removes saved server content and linked generation results; downloaded files and marketplace posts remain outside ListOnce.

Remembering how you like to read

The listonce-preferences setting keeps your language, contrast and text size in local storage. New visitors can choose whether to remember reading settings. Existing saved preferences are restored. Turn off “Remember my reading settings on this device” to remove them and stop saving them. Your current choices still work for the current visit.

We use reading settings only to provide your chosen language and accessible appearance. UK rules provide an appearance/functionality exception for this purpose. It needs clear information and a simple, free way to object. The reading-settings checkbox provides that choice at no charge. With remembering switched off, settings are kept only in page memory; no preference objection marker is stored.

A small reference for retries

The listonce-pending-request session setting contains a request reference and an input fingerprint, rather than the full photo or description. It helps an interrupted generation recover safely.

Relevant application actions clear it. Session storage normally lasts for the browser session, but a restored session may preserve it. Blocking it may affect retry recovery.

Hosting, sign-in and PayPal

The anonymous beta check observed Cloudflare’s __cf_bm cookie for bot protection (expires after 30 minutes of inactivity) and cf_clearance for security challenge clearance. Cloudflare controls clearance expiry through the hosting security settings; its lifetime can vary and a challenge can renew it. These protect the requested service and are used for security, rather than ListOnce advertising or visitor analytics. The private-link trial uses the __Host-listonce-beta session cookie. It is restricted to this site, sent over HTTPS, inaccessible to page scripts, and lasts up to one day. The server stores a hash of its secret, the link reference, a session reference and timestamps. Revoked or expired links stop future generation. This cookie is necessary to authenticate the private access you request, maintain that access and enforce the four-pack limit. Ending your session removes it. Saved-item storage is used when you request Save; the retry reference is used to recover a generation you request. We rely on the strictly necessary exception for those requested functions.

Owner sign-in opens ChatGPT authentication with OpenAI’s own cookies and choices. Testers do not need it. Owner-only PayPal sandbox checkout opens a separate PayPal site with its own cookies and privacy information. It is an optional payment simulation; no real purchase is needed for the invited beta. Live checkout, when enabled, also opens PayPal separately; PayPal controls its own cookies and notices. ListOnce does not load PayPal advertising scripts onto its pages.

Staying signed in to your account

Email-account access uses __Host-listonce-customer, a secure, HTTP-only cookie restricted to this site. It lasts up to seven days and uses SameSite=Strict. The server holds a hash of the session secret, account reference and expiry. The cookie is needed for the account access you request; it is not for advertising. Sign out removes the cookie and its server session. Only the owner can currently preview email account access; the same necessary cookie applies to customers when public access is enabled.

Your choices

Storage strictly necessary for a feature you request may qualify for an exception to prior consent. Other exceptions have their own conditions. Storage that does not meet an applicable exception must wait for valid consent; advertising storage needs consent.

You can delete saved items in ListOnce or clear this site’s data through your browser. Doing so may remove photographs, drafts, preferences and access/retry information. Blocking necessary storage may stop the relevant feature from working.

Clearing browser data does not erase server results or provider records. The privacy notice explains that distinction. Cloudflare’s security settings and provider storage may change. We review this notice when the beta’s storage changes.