Essential Cookies & Tokens
Strictly necessary for security and core functionality. We store JSON Web Tokens (JWT) for session management, anti-CSRF tokens, and security challenge tokens (via Cloudflare Turnstile). These cannot be disabled.
We also set a device security cookie that recognises your browser at sign-in, to protect your account and prevent abuse.
Experience & Local Caching
Used to store your Studio preferences, such as default resolution, theme selection, custom spawner physics parameters, and simulation settings (rhythmic, escape modes). This data is cached in IndexedDB.
Analytics Cookies
Only set if you allow the Analytics category. We use Google Analytics 4 and Google Tag Manager to understand which pages and features get used, plus a first-party event log for signed-in accounts. Until you consent, these tags run with all storage denied, they set no cookies and send no identifiers. With Analytics on, your browser also keeps a visitor journey record (the pages you visit and the buttons you press, never anything you type) in local storage for up to 7 days, and it is sent to us only if you create an account. We also keep referral origin and device capability in local storage to pick the right render settings.
Session Recordings (Microsoft Clarity)
Only set if you allow the Analytics category. Microsoft Clarity records how you move through our website and Studio: clicks, scrolling and what appears on the screen, so we can see where pages confuse people. Anything you type is hidden before it leaves your browser. If you are signed in, a recording is linked to your account number, never your email address. The script is not loaded at all until you allow Analytics, and its advertising cookies are set only if you also allow Marketing & attribution. Microsoft keeps most recordings for 30 days and some for up to 9 months.
Advertising & Conversion Pixels
Only set if you allow the Marketing & attribution category. We use the Meta (Facebook and Instagram) Pixel, the TikTok Pixel and Google Ads conversion tracking to measure which ads bring people here, and to show ads to people who have visited before. These scripts are not loaded at all until you allow this category. We never upload your email address, or anything derived from it, to any ad network.
Billing & Payment Cookies
Associated with our payment providers (Dodo Payments and Polar). They use cookies and local storage on their own checkout pages to process payments and prevent fraud.
