Authentication and account security
Essential session, sign-in, sign-out, verification and anti-forgery values are used by Layer400 and its identity service. Without them, account features cannot work securely. They normally expire at sign-out, after inactivity or at the security limit set for the session.
Device preferences
The browser may retain choices such as light or dark display, measurement units, dismissed guidance and the last non-sensitive map view. These values make repeat visits more useful and can be cleared through browser settings.
Chat with Layer400
Across our public website, except the live map, chat loads only when you open it. Our self-hosted Chatwoot service at chat.layer400.com uses browser storage to keep your conversation connected. The name and email address you provide, messages you send, connection information and the page you opened chat from are available to the Layer400 team. We do not automatically copy your Layer400 account, receiver setup or location into chat. Do not send passwords, device keys or setup files. Clearing chat storage may prevent you from returning to that conversation; it does not delete messages already sent to the team.
Security and load management
Short-lived values may help enforce rate limits, identify a valid request, distribute traffic and defend the service. They are used for operation and security rather than advertising.
Optional website analytics
When available, Google Analytics 4 loads on public information pages only after you select Allow analytics. Reject analytics is equally available and does not limit the website. Measurement can include page use, scrolling, public links and supported media interactions. Account, sign-in, map, receiver setup and account-linked download screens are excluded. Layer400's own analytics events use general public section names, not account identifiers, receiver names, exact locations, form contents, claim codes, URL queries or fragments. Google receives ordinary connection and browser information when its script is allowed to load. Advertising features and Google Signals are disabled in the website tag.
Analytics cookies beginning _ga are limited to 180 days without renewal on each visit. Your accepted or rejected choice is remembered locally for up to 180 days. You can change it using Cookie settings on public information pages; withdrawing permission stops future measurement and removes these analytics cookies. Browser Do Not Track and Global Privacy Control signals keep optional analytics off.
Signup protection
Google reCAPTCHA v3 protects account registration against automated abuse. It is separate from optional analytics and runs on the identity service's signup form. Google can process request, browser, device and interaction information for this security check. The page displays Google's reCAPTCHA notice. See Google's Privacy Policy and Terms of Service.