Cookie Policy

Cookies and local storage (localStorage/sessionStorage) are small pieces of data stored on your device to run the site, keep you signed in, and remember certain preferences.

This notice describes the technologies currently in use. For personal data processing in general, also see our Privacy Policy.

Authentication (essential): Supabase session cookies to keep you signed in, refresh tokens, and protect the OAuth/PKCE flow. Without these cookies you cannot stay logged in.

Remember me (functional): preference stored in localStorage and, when enabled, extended authentication cookie lifetime (up to about 400 days). If you disable "Remember me", the session ends when you close the browser.

Language (functional): IT/EN preference stored in localStorage (`phyrexian-arena-language`).

App cache (functional): playgroups, recent records, decks, commander images, and live-game operations may be stored locally on the device for fast startup, offline use, and crash recovery. The cache is separated by account and refreshed from the server.

Security and operation (essential/technical): temporary sessionStorage for OAuth return handling, access-log deduplication, demo-mode cache, and local EDHREC cache to reduce repeat requests.

Cloudflare Turnstile (security): on registration, password recovery, and resend-confirmation pages it may use similar technologies to verify the request is not automated. It is activated only when you use those features.

Google OAuth (authentication): if you choose "Sign in with Google", you are redirected to Google, which may use cookies under its own policy. Use is optional and only on your initiative.

We do not use third-party analytics, advertising, or commercial profiling cookies (e.g. Google Analytics, Meta Pixel).

At present the site uses only cookies and storage that are strictly necessary or functional to the service you request. For this reason we do not show a cookie consent banner.

If we later introduce non-essential cookies (e.g. marketing analytics), we will update this notice and ask for consent before using them.

You can disable "Remember me" at login, change language in the UI, sign out, or clear cookies/storage from your browser. Disabling essential cookies will prevent sign-in.

For third-party policies: Cloudflare (cloudflare.com), Google (policies.google.com), Supabase (supabase.com).

We may update this notice when the technologies in use change. The last updated date is shown at the top.

For questions about this document, write to support@21life.win. Last updated: 2026-07-29.