Cookies & browser storage
Small records that keep the game working
Login cookies
When you sign in, an HttpOnly session cookie keeps you signed in for up to seven days. The production name is __Host-stb-session; local development uses stb-local-session. Logging out clears the current session. Optional Google sign-in also uses a short-lived state cookie to validate the sign-in attempt.
Local storage
| Record | Purpose | Duration |
|---|---|---|
| Practice best scores | Remember best scores for each board size on this device | Until browser data is cleared |
| Room seat token | Restore your place in a friend room | Until leaving the room or clearing browser data; access expires with the room after 24 hours |
| Nickname | Pre-fill your name for a room | Until browser data is cleared |
First-party website statistics
We do not use advertising cookies. Our Cloudflare-hosted statistics script stores a random visitor ID in local storage (website-analytics-visitor-v1) and a session record in session storage (website-analytics-session-v1). Sessions renew after 30 minutes of inactivity. Visitor and session IDs are hashed in the statistics database. Statistics are retained for 90 days and summarized in daily reports. The script respects Do Not Track and Global Privacy Control.
Use this control to stop optional page statistics on this browser. Essential account security events continue.
Manage storage
Use your browser’s site settings to inspect or clear cookies and local storage. Blocking cookies prevents persistent login. Blocking local storage can prevent saving best scores or restoring a room seat. Guest practice can still be played without saved scores.