1. What we set

Signing in sets an httpOnly session cookie. It identifies your session to the game server and cannot be read by JavaScript in your browser.

• Session cookie: keeps you signed in, expires after seven days or when you sign out.
• CSRF cookie: protects sign-in and account forms against cross-site request forgery.

2. What we do not set

No advertising cookies, no third-party analytics, no cross-site tracking pixels, and no fingerprinting beyond the IP address and user agent already recorded against your session for security.

3. Managing cookies

You can clear cookies at any time in your browser. Because our cookies are strictly necessary, blocking them means you cannot sign in or play.