1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They serve various purposes such as remembering your preferences, keeping you logged in, and understanding how you use the service. Similar technologies include local storage, session storage, and device identifiers in mobile applications.
2. Cookies We Use
Citadel TCG uses a minimal number of cookies and local storage entries. We do not use any third-party tracking or advertising cookies.
2.1 Strictly Necessary (No Consent Required)
These are essential for the platform to function. They cannot be disabled.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| auth_token | Local Storage | Keeps you logged in (JWT authentication token) | Until logout or expiry |
| user | Local Storage | Stores your profile data for fast page loads | Until logout |
| sidebar:state | Cookie | Remembers whether the sidebar is open or collapsed | 7 days |
2.2 Functional (No Consent Required)
These store your preferences to improve your experience. They do not track you across sites.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| theme | Local Storage | Remembers your selected theme (dark/light) | Persistent |
| scan_session | Local Storage | Preserves card scanning session data | Until scan complete |
| referral_code | Local Storage | Stores referral code from invite links | Until registration |
| dismissed_suggestions | Local Storage | Remembers dismissed UI suggestions | Persistent |
2.3 Third-Party Services
When you interact with certain features, third-party services may set their own cookies or use device identifiers:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing — sets cookies for fraud prevention during checkout | stripe.com/privacy |
| Google Sign-In | Authentication — sets cookies when you sign in with Google | policies.google.com/privacy |
| Apple Sign-In | Authentication — uses Apple's identity service | apple.com/legal/privacy |
2.4 Mobile Application
The Citadel TCG mobile app does not use traditional HTTP cookies. Instead, it uses:
- Secure Storage — for authentication tokens (equivalent to auth cookies)
- AsyncStorage — for user preferences and cached data
- RevenueCat SDK — for subscription management (uses anonymous app user IDs)
- Expo Notifications — for push notification tokens (with your consent)
3. Analytics and Tracking
We do not use any third-party analytics services. We do not use Google Analytics, Facebook Pixel, Mixpanel, Hotjar, or any similar tracking tools. All analytics data (such as ad click counts and scan statistics) is processed internally on our own servers and is never shared with third parties for advertising or profiling purposes.
4. Managing Cookies and Storage
You can manage cookies and local storage through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Please note that disabling strictly necessary storage (such as the auth token) will prevent you from using Citadel TCG, as you will not be able to remain logged in.
5. Do Not Track
Since we do not use third-party tracking, Citadel TCG does not need to respond to "Do Not Track" browser signals. We already do not track you across other websites or services.
6. Changes to This Policy
We may update this Cookie Policy to reflect changes in our use of cookies or applicable laws. Any changes will be posted on this page with an updated "Last updated" date.
7. Contact
If you have questions about our use of cookies, contact us at info@castellum-forge.net.