Cookie policy
Why there is no cookie banner
Because we do not set any cookie that needs consent. There is no advertising, no third-party tracking and no cross-site anything. Everything below is strictly necessary for the service to work.
What we set
| Name | What it does | How long |
|---|---|---|
3s_session | Keeps you signed in. HttpOnly, Secure, SameSite=Lax. Contains an opaque token, nothing about you. | 30 days |
3s_csrf | Protects against another site submitting forms as you. Readable by our own code so it can be echoed back in a header. | 30 days |
What we deliberately do not use
- No advertising cookies. There are no ads on any plan, so there is nothing to target.
- No third-party trackers. No Google Analytics, no Facebook pixel, no session recorders, no heatmaps.
- No cross-site identifiers. Nothing we set is readable by any other site, and we neither buy nor receive data about you from anywhere else.
Turning them off
You can block cookies for this site in your browser. The consequence is specific rather than vague: you will not be able to stay signed in, because the session cookie is how we know it is you. Everything on the public side — the rules, the guides, the calculators, the format pages — works perfectly well with every cookie blocked.
Local storage
The app also keeps the night you are running in your browser's local storage. That is what lets it carry on when the wi-fi drops. It stays on your device, and clearing your browser data removes it along with any night that has not synced.
The player strike card remembers which name you picked, on your phone only, so a second scan opens straight onto your own card.
Analytics
Cloudflare Web Analytics is cookieless and does not fingerprint visitors.
Stripe
If you go to checkout, Stripe sets its own cookies on its own pages for fraud prevention. That happens on Stripe's domain, under their privacy policy.