1. How SupaSnake uses cookies and browser storage
SupaSnake uses very few cookies. Most of what we store lives in your browser's localStorage (which stays on your device and is not sent with every request). This policy lists every entry, grouped by category. Under §165(3) of the Austrian Telecommunications Act (TKG 2021) and the GDPR, anything that is not strictly necessary is used only with your prior consent, which the cookie banner collects and which you can change at any time in Settings → Privacy.
We set no advertising or marketing cookies, and no third-party tracking pixels. Game progress, run receipts, rewards, and notification state are stored on SupaSnake's servers, never in browser storage.
2. Strictly necessary (no consent required)
Required for the Game to function — signing in, keeping your session, remembering your consent choices, and the age gate. Legal basis: §165(3) TKG 2021 (strictly necessary exemption).
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token | localStorage | Your Supabase sign-in session (JWT + refresh token) | Until sign-out |
| cookie-consent | localStorage | Stores your consent choices from the cookie banner | Until changed or cleared |
| age_verified / age_verified_at | localStorage | Remembers that you passed the age gate, so the page does not flicker while it asks. It is only a copy: the verification itself is held on our server against your session, and that is what decides. | Until cleared |
| supasnake-last-user | localStorage | Account-continuity hint (account ID and a masked e-mail hint, e.g. "jo***@…") so we do not silently create a different guest account. It contains no earned state. | Until cleared |
3. Functional (consent)
Convenience preferences. The Game works without them; you would just have to re-select preferences each visit.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| supasnake.pwa.install.v1.device | localStorage | Remembers whether this device dismissed or installed the optional home-screen shortcut, and how often that offer appeared. It contains no run or progression data. | Until cleared |
4. Analytics (consent)
Set only after you enable the Analytics category. Used to understand how the Game is played so we can improve it. Details on the processing are in section 3.6 of the Privacy Policy.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| __ph_opt_in_out_* | localStorage | Remembers only whether you opted product analytics in or out. PostHog device IDs, person properties, and analytics session state are memory-only and disappear when the page closes. | Until your choice changes or storage is cleared |
4a. Marketing (consent)
Written only after you enable the Marketing category, and only to answer one question: which channel brought you here. We keep the campaign labels from your link and the referring site's host name — never the full referring address, and never an advertising identifier. We run no advertising network and place no third-party advertising tags. If you leave this category off, nothing below is stored and arrivals are simply counted as direct.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| supasnake-attribution | sessionStorage | The campaign labels (utm_*) in the link you arrived on and the host that referred you — never the full referring address. Used to see which channels bring players. Written only after you enable the Marketing category. | Until you close the browser tab |
5. Third-party pages
When you start a purchase you are redirected to Stripe Checkout (checkout.stripe.com), which sets its own cookies for payment and fraud prevention under Stripe's cookie policy. If you link Discord, the OAuth flow happens on discord.com under Discord's policies. Neither happens without an action you take.
6. Managing consent
You can accept all, reject all, or pick categories in the cookie banner on first visit, and change your choice any time in Settings → Privacy. Rejecting non-essential categories never blocks you from playing. You can also clear all locally stored data via your browser settings.
Questions? Contact support@supasnake.com or use the contact form.