Cookie Policy
Short version: we don't use third-party tracking. Functional storage only.
What we use
| Type | Name(s) | Purpose | Lifetime | Required? |
|---|---|---|---|---|
| localStorage | ff_fan_profile_v3, ff_game_state_v1, ff_era_v1, ff_pc_v1, ff_q_day_*, etc. | Stores your profile, XP, badges, photocards, daily quests, era pass progress | Until you clear it | Yes (functional) |
| localStorage | ff_newsletter_v1 | Remembers your newsletter preferences locally | Until you clear it | No |
| sessionStorage | ff_admin_token_v1 | Admin dashboard auth (only if you use it) | Until tab closes | No |
| Third-party cookies (YouTube) | Various | Set by YouTube only when you press play on an embedded video | Per Google's policy | No (only if you interact) |
| Third-party cookies (Google Translate) | Various | Set by Google Translate widget at top of page (if used) | Per Google's policy | No |
What we do NOT use
- Google Analytics, Plausible, Mixpanel, Amplitude, or any analytics SDK
- Facebook Pixel, TikTok Pixel, X/Twitter Pixel, Snap Pixel, Pinterest tag, or any ad-network tracking
- Hotjar, Mouseflow, FullStory, LogRocket, or any session-replay tool
- Affiliate-network tracking cookies
How to control them
- Clear localStorage: Browser dev tools → Application tab → Local Storage → right-click → Clear. Or use the "Delete My Data" button in your profile menu.
- Block YouTube cookies: Don't press play on the embedded videos. Or use a privacy browser extension.
- Block Google Translate: Browser extensions like uBlock Origin can block Google Translate widgets.
- Browser-level blocking: Most modern browsers (Firefox, Safari, Brave) block cross-site cookies by default.
Do Not Track / Global Privacy Control
We don't sell or share your data, so honoring DNT/GPC is moot — but if you send those signals, our minimal data practices already match what those signals request.