UK PECR and EU ePrivacy rules cover cookies and similar storage. Here is what Off the Radar actually uses.
Strictly necessary (localStorage)
otr-consent-v1— remembers Essential only vs Accept analytics. Migrated from legacyvi-consent-v1if present.otr-pass-v2— remembers Studio Pass unlock on this browser (ident convenience, not a locked overlay pack).otr-studio-v1— Channel tag, tonight line, skin, and waiting-room still. Migrated from legacyvi-studio-v1if present.otr-rp-interest-v1— local UX marker after you submit RP interest (does not replace the Supabase waitlist row).
Supabase Auth (session)
If you sign in with Discord, supabase-js stores session tokens in browser storage (typically localStorage under keys scoped to the project URL, such as sb-*-auth-token). That storage is strictly necessary to keep you signed in and refresh the session. Sign out clears it.
Analytics (consent only)
If you accept, we load Vercel Web Analytics and Speed Insights. Vercel documents these as first-party, cookieless beacons for page views and performance. They do not run until you accept.
Third-party checkout
Whop checkout (Beast Army / Studio Pass when paid) may set its own cookies on Whop domains. Those are governed by Whop’s policies, not this cookie list.
What we refuse to load
- Google Ads / AdSense / DoubleClick
- Meta, TikTok, or X pixels
- Any advertising or remarketing cookie on this origin
Change your mind
Use Consent in the footer. Essential only unloads analytics on the next page load. Clear this site’s data in your browser to wipe local keys and auth storage.
Last updated 23 September 2026.