Ordinary app sessions
The PEZ4 web application's bearer token stays in the current tab's memory; it is not intentionally stored in cookies, localStorage, invitation URLs or referrers. Signing out clears the tab credential and requests server revocation. Lid requests revocation of sessions for that browser key. If revocation cannot be confirmed, the app reports that limit instead of promising success. The local key remains for later sign-in.
Browser storage
IndexedDB stores the nonextractable browser signing key and separate encryption/storage keys plus encrypted chat history, drafts, profile picture, Tin Vault and unopened one-view media. Public pinned-key metadata is also stored. Explicitly saved display preferences use localStorage, including theme/layout/language and optional local brand/status drafts. Invitation-bound business display data may use sessionStorage without retaining the private invitation code. Test checklist results remain in RAM until exported or cleared.
Essential infrastructure cookies and external services
The separately enabled Founder page uses an essential PHP session/CSRF cookie. Cloudflare may apply security cookies or equivalent mechanisms according to the site's configuration. This release adds no optional advertising or analytics cookie, tracking pixel, embedded public video player or third-party font/CDN script. Downloading native dependencies from package repositories is a separate setup action outside normal app use.
Clearing data and your choices
Save display preferences only when you want them retained. Reset display removes those preferences. Clear chat history, Clear draft and Hungry Whales target their named local collections. Clearing all site data can delete your only approved key and permanently lose access to local encrypted content; link another trusted browser first. Apex and www are different browser origins with separate storage. A recipient's downloaded file is outside these controls. Browser or operating-system backups may retain historical copies; logical deletion is not a guarantee of physical erasure.