Last updated · 13 October 2026 · Version 2026-10-13.2
Cookie & Storage Policy
flan games uses no advertising cookies. We store a few first-party items in your browser so the games work and remember your preferences and, only if you allow it, analytics: our own and Google Analytics. You choose in the "Before you play" notice and can change it any time with Your privacy choices.
1. What we store in your browser
| Name | Category | Purpose | Life |
|---|---|---|---|
Supabase auth token (sb-...-auth-token) | Essential | Keeps you signed in. | Until you log out or it expires. |
flan.consent, flan.notice.v1 | Essential | Remembers your consent choices so we don't ask again until the policies change. | Persistent. |
flan.device | Essential (and analytics, if allowed) | A random device id (no name, no email). Needed to count your free games, keep your daily card, predictions, AI memory and invitations. Used for analytics only if you allow analytics. | Persistent until you clear it. |
flan.gate.* | Essential | Free-game counter, verified email and club status for the free-play gate. | Persistent. |
flan.session, flan.me, flan.trivia.*, flan.streak,
flan.daily.*, flan.reveal.*, flan.ctx*, flan.seen | Functional | Game progress, guest profile, streaks, your daily card and sign, context you gave King Flan, what you've already seen. | Persistent. |
flan.ref.*, flan.lead.* | Functional | Your invite code, who invited you, and whether you already left your email. | Persistent. |
flan.lang, flan.country, theme | Preferences | Your language and interface choices; the country code of your first visit (never the IP). | Persistent. |
flan.utm, flan.sess, flan.firstday, flan.ev.* |
Analytics | Where your first visit came from and avoiding counting the same event twice. Sent to us only if you allow analytics. | Session or persistent. |
_ga, _ga_* | Analytics (Google) | Set by Google Analytics to count visits and sessions. Only set if you allow analytics. | Up to 2 years. |
Most of these are technically local storage, not classic cookies, but the same rules apply, so we list them.
2. Our analytics
First-party and on our own database: sections visited, a small set of named game events, language and the referring site's host; on our servers we attach IP address and user-agent (see the privacy policy). Nothing is sent until you decide, and nothing is sent if you choose "Essential only" or your browser sends Global Privacy Control.
With the same consent we also load Google Analytics 4 (Google LLC), which receives the pages you visit, your IP
address and browser details, and sets the _ga cookies, under
Google's privacy policy. It is never loaded before you
decide, if you choose "Essential only", or if your browser sends Global Privacy Control. We do not use ad pixels.
3. Third parties
- Google Fonts and jsDelivr deliver fonts and an open-source library; your browser sends them your IP address and user-agent when it loads them. They do not set cookies for us.
- Google Analytics: only if you allow analytics (see section 2).
- Stripe or Mercado Pago may set their own cookies on their checkout pages to process payment and prevent fraud, under their own policies.
4. Your choices
- Change analytics any time from Your privacy choices (link at the bottom of every page).
- Clear everything from your browser settings ("clear site data" for flan.games). You will be asked to consent again.
- Blocking essential storage signs you out and stops the games from working properly.
5. Contact
Questions: privacy@flan.games.