Cookie Policy
Last updated September 9, 2026
We use a handful of first-party cookies and browser storage so the arcade works. We do not set advertising, analytics, or tracking cookies.
What we use
| Name | Purpose | Where | How long |
|---|---|---|---|
| authjs.session-token | Keeps you signed in | Cookie | Session / a few weeks |
| authjs.csrf-token | Stops cross-site form attacks | Cookie | Session |
| authjs.callback-url | Where to send you after sign-in | Cookie | Session |
| lilvra:consent | Remembers cookie, notification and disclaimer choices | localStorage | Until you clear it |
| lilvra:plays | Your play history and best scores on this device | localStorage | Until you clear it |
| lilvra:played:* | So we count a play once per tab, not every refresh | sessionStorage | Tab |
Essential vs optional
Sign-in cookies are strictly necessary. Play history on this device is functional (so guests keep a best score). Optional: product emails, which we only send if you accept notifications on the consent banner.
Your choices
The banner on first visit lets you accept all or keep essential only. You can also block cookies in the browser; if you block essential ones, sign-in will not work. Clearing site data removes play history stored on this device (the server copy stays if you were signed in).
Third parties
Google may set its own cookies if you use “Continue with Google.” That is Google’s policy, not ours. We do not embed ad or analytics tags.
Related: Privacy Policy · Disclaimer