Cookie Policy

No advertising or analytics cookies

This Site sets no advertising, analytics or tracking cookies — no pixels, no web beacons and no third-party trackers. We do not sell or share data for advertising, and there is nothing to opt out of.

The one cookie we do set: your sign-in session

The only cookie this Site ever sets is the session cookie you get when you sign in with Google. The API sets it on its own host — it is named `mg_session`, and it is HttpOnly (JavaScript cannot read it), Secure (sent only over HTTPS), SameSite=Lax, sent only to the API host that set it, and valid for 30 days.

It contains a single random identifier, and our database stores only a SHA-256 hash of it, so the cookie cannot be used to read anything else or to recover your account from a database copy.

Signing out deletes the session and expires the cookie. If you never sign in, no cookie is ever set.

What your browser stores instead

Your game progress is kept in your browser using local storage, under the key `sokoban.progress.v1`. Local storage is not a cookie: it is never sent to us and we cannot read it. The other games in this project keep their own progress under their own key on their own domain.

How to remove it

Clear the site data for play-sokoban.com in your browser settings, or sign out and play in a private window. Clearing your progress resets your best times and nothing else; clearing cookies signs you out.

If this changes

No advertising and no analytics are used today. If either is ever added, this page and the Privacy Policy will be updated before those tools load and, where the law requires it, we will ask for your consent first.

Contact

Use the contact page.