Cookies & Device Storage

No cookie banner today

UK PECR, as explained in the ICO's April 2026 storage and access technologies guidance, still starts from consent. Consent is not needed where storage is strictly necessary to provide a service you asked for, such as authentication, security, or remembering choices needed for that service.

PitchWar currently uses first-party auth cookies, local/session storage for game identity and local play, and Stripe's checkout storage when you choose to pay. We do not load Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, Clarity, or similar advertising/analytics SDKs. First-party product events are sent to our own server after you use the game; they are not a third-party advertising cookie.

If we later add a technology that needs consent, we will not load it until you have a real choice, with Reject as easy as Accept.

What we store

• Supabase Auth cookies. First-party session cookies so anonymous play, rooms, and optional saved identity work. Strictly necessary for the service you requested.
• pw_player_{code} in localStorage. Remembers which player you are in a room so you can return to the same seat.
• pw_device_id in localStorage. A random device identifier used when creating or joining a room.
• pw_local_session_v1 in sessionStorage. Keeps a local pass-and-play night going in this browser tab.
• pw_premium_analytics_v1 in localStorage. First-party counts of premium UI clicks on this device. Not a third-party tracker. You can clear site data in your browser to remove it.
• pw_sponsor_toast_{room} in sessionStorage. Stops a sponsorship toast repeating in the same tab.
• pw_timer_sound_muted in sessionStorage. Remembers whether you muted the pitch-timer countdown for this browser tab.
• Stripe Checkout. If you open payment, Stripe uses its own storage on Stripe's domain to take the payment you requested.

Older storage

Unsigned pass cookies such as pw_pass_until are no longer used as paid authority. We do not revive them. Clearing site data will not cancel a real Stripe entitlement stored on the server.

More detail

Personal data is explained in the Privacy Policy.