Cookies
Version 2026-10-05Gültig ab 4. Okt. 2026
Der vollständige Text unten ist auf Englisch, und der englische Text ist maßgeblich.
In short
- We use no advertising cookies and let no other company track you on our site.
- What we store without asking is needed for a feature you use, protects the Daily Drop against abuse, or remembers a choice you made.
- Analytics runs only after you accept it in our cookie banner, and nothing of it loads before you do.
01What we store in your browser
These are the cookies and similar storage the site uses. "Local storage" stays until you clear it; "session storage" ends when you close the tab.
| Name | Kind | What it is for | How long | Needed? |
|---|---|---|---|---|
| n01_consent | Cookie (ours) | Remembers whether you accepted Analytics, with the banner's version and the date | 6 months | Strictly necessary |
| N01_LOCALE | Cookie (ours) | Remembers your language | 1 year | Remembers your choice |
| n01:auth | Local storage | Keeps you signed in | Until you sign out | Strictly necessary |
| n01:checkout-key:… | Session storage | Stops a reload from placing the same order twice | Until you close the tab | Strictly necessary |
| n01:sign-up-email | Session storage | Lets the "check your email" page send the link again | Until you close the tab | Strictly necessary |
| n01:return-to | Local storage | Takes you back to the product you were looking at after you sign up | Used for 24 hours | Strictly necessary |
| n01:board-seed | Local storage | Your Daily Drop seed, so you can check your drop | Replaced each day | Strictly necessary |
| n01:device | Local storage | A random id. Only a one-way hash of it is sent with each Daily Drop, to spot many accounts played from one device. It never blocks anything on its own | Until you clear it | Set when you use the Daily Drop, to protect it against abuse |
| unseald:sound | Local storage | Remembers whether sound is on | Until you clear it | Remembers your choice |
| n01:skip-opening-animation | Local storage | Remembers that you skip the opening animation | Until you clear it | Remembers your choice |
| n01.nav | Local storage | Remembers whether the side menu is open | Until you clear it | Remembers your choice |
| n01.feedView | Local storage | Remembers whether you see the latest pulls as a row or a list | Until you clear it | Remembers your choice |
| n01:reveal-seen | Session storage | Remembers that the logo animation has played in this tab | Until you close the tab | Remembers your choice |
| __stripe_mid, __stripe_sid | Cookies (Stripe) | Fraud prevention for card payments, set when you pay by card | 1 year / 30 minutes | Strictly necessary |
| _vcrcs | Cookie (Vercel, our host) | Shows that your browser passed a security check | Short | Strictly necessary |
| __cf_bm | Cookie (Cloudflare, on our image storage) | Bot protection for card images | 30 minutes | Strictly necessary |
| ph_…_posthog | Cookie and local storage (PostHog) | A random id for your browser, not linked to your account, and the current visit | 1 year | Analytics: only with your consent |
| __ph_opt_in_out_… | Local storage (PostHog) | Records that analytics may run in this browser | Until you withdraw | Analytics: only with your consent |
| ph_…_window_id and similar | Session storage (PostHog) | Tells tabs and page loads of one visit apart | Until you close the tab | Analytics: only with your consent |
02Other services your browser contacts
Card images load from our storage at Supabase. If one of them is missing, the image may load from TCGdex. The bot check on the sign-up, sign-in and password pages loads from Cloudflare. Stripe's payment code loads on pages where you can pay, and its payment form loads a font from Google Fonts. Only if you accept Analytics, PostHog's script and events go through our own address to PostHog in the EU. We serve our own fonts, so other pages make no request to Google.
03Your choice
The cookie banner asks before any analytics runs. Accept and Reject are equally easy, and Settings shows the two kinds: Necessary (always on) and Analytics (off until you turn it on). If you reject, or haven't chosen yet, nothing of PostHog is loaded.
We keep your answer for 6 months and ask again sooner if the banner changes. Cookie settings, at the bottom of every page, opens it again: turning Analytics off deletes PostHog's cookies and storage at once. Analytics never records what you type, your name, email, card or address, and it is off on the checkout, sign-in, sign-up and account pages.
You can also delete all of this in your browser's settings. If you delete n01:auth, you are signed out.
How we use personal data in general is in the privacy policy.