Cookies & browser storage

One access cookie unlocks the gated demo. localStorage and sessionStorage hold UI preference and short-lived demo state, including Code Agent run restore in the current tab.

• theme: dark or light UI preference, read on first paint to avoid flash.
• agent-cycle-history-v1: up to 12 agent-cycle metric snapshots (pass rates, governance scores). No raw prompts.

• ai-studio-recruiter-tour-dismissed: hides the quick-start banner for the current browser session.
• tower-sandbox-export: temporary prompt and knowledge-base handoff from AI Tower to the agent sandbox.
• code-agent-demo-run:<scenarioId>: last Code Agent run id for that scenario (restore after refresh). Prefer the runId URL query when present.
• code-agent-demo-snapshot:<runId>: short-lived cached run snapshot for faster restore in this tab. May include investigation payload fields also held server-side. Cleared when the demo session resets the run.

No Code Agent recent-runs list in localStorage. Cross-device or cold-start restore uses Neon run documents when configured. See Privacy.

The layout loads Vercel Web Analytics in production via /_vercel/insights/script.js. It does not set cookies.

• Page path. Query strings are stripped before events are sent.
• Referrer URL.
• Approximate country and device type, OS, and browser (aggregated in the Vercel dashboard).
• Custom events: none from the client. Gate events are recorded server-side in the audit log.

Reporting only when Web Analytics is enabled in the Vercel project. Cookieless. Visitors are counted via a daily-resetting edge hash, not device storage.

• No non-essential cookies are set.
• Web Analytics does not write to your browser.
• The gate cookie is required for the access-protected demo.
• Other browser storage is listed above.

Server-side processing and retention: Privacy.