Cookie Policy
Effective: 1 August 2026
Fablebloom uses essential first-party authentication cookies, one consent cookie, and clearly identified local storage. Optional analytics is cookieless, opt-in, and has no session replay.
Essential cookies
Better Auth sets a first-party, server-managed session-token cookie for guest and registered sessions. The session normally expires after seven days and can be refreshed while it remains active. Better Auth may also set short-lived state, verification, or preference cookies during email-link or Google sign-in. Cookie names can carry a secure prefix and lifetimes vary by the flow. Authentication cookies are HttpOnly, Secure in production, SameSite=Lax, and limited to the paths and duration needed for sign-in, session continuity, request protection, and account security.
Analytics, which sets no cookies
Our self-hosted OpenPanel browser tracker sets no analytics cookies and session replay is disabled. The script is not loaded and no optional browser analytics is sent until you choose Allow analytics. Essential Cloudflare logs and minimized server-side service, security, match-completion, purchase-completion, and error records are not controlled by this optional cookie choice; the Privacy Policy explains those records.
Your consent choice
The first-party fb_consent cookie stores granted or denied status, an anonymous consent identifier, and policy version for one year. It is available to browser code because the consent interface must read and change the choice. An outdated policy version is rejected and the banner asks again while preserving the anonymous identifier.
To withdraw or change the choice, use Manage cookies in the site footer or on this page. The banner returns so you can select Allow analytics or Essential only again. You may also clear fb_consent in your browser and reload, or contact hi@brandnuits.com to request deletion of the corresponding server consent record.
Local storage
fb-settings stores accessibility, motion, audio, and interface preferences. fb-trail stores local Restoration Trail progress. fb-troupes stores locally built Troupes. Local storage is not a cookie, is not sent automatically with requests, and remains on the device until the app or browser clears it.
You may block or clear cookies and local storage in browser settings, but clearing essential cookies signs you out and clearing guest or local game data may permanently lose unlinked progress. You can decline or withdraw analytics without affecting essential storage.
Contact
Contact hi@brandnuits.com with storage or consent questions.