Authentication and account security
Essential session, sign-in, sign-out, verification and anti-forgery values are used by Layer400 and its identity service. Without them, account features cannot work securely. They normally expire at sign-out, after inactivity or at the security limit set for the session.
Device preferences
The browser may retain choices such as light or dark display, measurement units, dismissed guidance and the last non-sensitive map view. These values make repeat visits more useful and can be cleared through browser settings.
Chat with Layer400
Across our public website, except the live map, chat loads only when you open it. Our self-hosted Chatwoot service at chat.layer400.com uses browser storage to keep your conversation connected. The name and email address you provide, messages you send, connection information and the page you opened chat from are available to the Layer400 team. We do not automatically copy your Layer400 account, receiver setup or location into chat. Do not send passwords, device keys or setup files. Clearing chat storage may prevent you from returning to that conversation; it does not delete messages already sent to the team.
Security and load management
Short-lived values may help enforce rate limits, identify a valid request, distribute traffic and defend the service. They are used for operation and security rather than advertising.
Optional website analytics
Google Analytics 4 starts automatically on public website pages, including the live map, activity, features, guides and public downloads, unless you have disabled it or your browser sends a supported privacy signal. This default-on measurement uses analytics cookies; it is not cookie-free measurement. Use Cookie settings to disable analytics or continue without cookies. Existing saved full rejection and cookie-only refusal remain respected. Measurement can include page use, browser-history navigation, scrolling, public links and supported media interactions. Private account, sign-in, administration, business API management and receiver setup screens are excluded. Layer400's own initial page-view events use general public section names rather than account identifiers, receiver names, exact locations, form contents, claim codes, URL queries or fragments. Google's automatic measurement is configured separately and may process public page URLs and navigation, including map URL parameters. Google receives ordinary connection and browser information when its script loads. Google Signals are disabled and advertising-data consent remains denied.
Analytics cookies beginning _ga may be set on your first public page visit and last for up to 180 days without renewal on each visit. Your analytics choice is remembered locally for up to 180 days. Continue without cookies removes these cookies and restarts with cookieless signals, which do not guarantee individual Realtime reporting. Disable analytics removes analytics cookies and stops future Google measurement. Browser Do Not Track and Global Privacy Control signals keep all Google analytics off. Changing your choice does not retract measurement already sent.
Signup protection
Google reCAPTCHA v3 protects account registration against automated abuse. It is separate from optional analytics and runs on the identity service's signup form. Google can process request, browser, device and interaction information for this security check. The page displays Google's reCAPTCHA notice. See Google's Privacy Policy and Terms of Service.