If you only care about User Tracking, I think that only cookies can be used
for that. LocalStorage and any data that is saved in browser like IndexedDB
can't be used in any way to track users.

Cookies can also be safe to use, but I think that if we don't need to create
any sessions on the server (use them only when logged in) we don't need to use
them. This will also make cookie banner that is required in Europe not
needed. I'm not sure if you need cookie baner for user login as per EU law.

On Mon, 22 Aug 2022 15:17:44 +0300
Lassi Kortela <xxxxxx@lassi.io> wrote:

> > I've gone over https://www.scheme.org/charter/ again, and it seems I
> > overlooked the point that says
> >
> > * No cookies or other local storage. Exception: session for users who
> > explicitly logged in.
>
> Thanks for being diligent!
>
> The rules are drafted by me based on a handful of informal discussions
> with whoever I've managed to beg and guilt into focusing on the topic
> for a moment :p I've been trying to start a group discussion about them,
> but so far people haven't been interested.
>
> If you think the rules should be changed, you may well have a point. I
> agree that local storage is much smoother than query strings.
>
> Magnus, if you're lurking, any ideas?
>

--
Jakub T. Jankiewicz, Senior Front-End Developer
https://jcubic.pl/me