This translation is provided for information. Only the French version is binding: it is governed by French law, and it prevails in the event of any discrepancy. Read the French version

Project Nat20 sets a single cookie, strictly necessary to sign in, shielded from being read by JavaScript. No advertising tracker, no profiling, no third-party analytics. There is nothing to "accept" or "refuse": without this cookie, staying signed in is impossible.

1. In brief

One cookie, and only one: the one that keeps you signed in.
Set only after you sign in, never before.
Unreadable by page scripts, sent to our server only.
No third-party cookie, no advertising, no tracker.

2. What a cookie is

A cookie is a small file a site asks your browser to keep and send back on each visit. Some serve advertising or tracking; others are essential to a service working at all. Ours is only ever the latter.

3. The cookie we use

nat20_session — session cookie.

Purpose: keep you signed in from page to page. Without it, every page would treat you as signed out.
Contents: an opaque session identifier, never your password or personal data in clear text.
Lifetime: up to 30 days, expiring sooner after prolonged inactivity. It is removed immediately when you sign out.
Properties: HttpOnly (unreadable by JavaScript), Secure (sent over HTTPS only), SameSite=Lax (not sent to third-party sites).
Issuer: Project Nat20 itself (first-party), never a third party.

4. Why there is nothing to accept

The rules (the ePrivacy directive, the French CNIL's position) require consent for advertising, analytics or tracking cookies — but exempt cookies strictly necessary for the service you asked for. A sign-in cookie is one of those. Asking you to accept it would be misleading: refusing it would make signing in impossible.

The banner you may have seen on arrival does not ask for your consent: it informs you, and its single button dismisses it. Nothing is stored or withheld depending on whether you click — beyond the fact that you have read it, so it is not shown again on every page.

5. What else your browser keeps

A cookie is not a browser's only memory. Project Nat20 also uses local storage, which stays on your device and is never sent to the server — that is the difference with a cookie, which travels with every request.

It only holds your display preferences:

the language you picked;
sound volume and mute;
the dice skin you selected;
which table panels you collapsed;
the fact that you have read the information banner.

None of these values identifies you, follows your browsing, or leaves your device. They disappear when you clear the site's data in your browser — you simply get the defaults back.

6. Manage and delete this cookie

Signing out deletes the cookie immediately on the current device.
From your dashboard, the "My connected devices" section lists your open sessions and lets you close them remotely, including all others at once.
Your browser can also view and clear a site's cookies (its "Privacy"/"Cookies" settings). Clearing nat20_session simply signs you out.

7. No third-party trackers

No third-party advertising, analytics or social-network service sets a cookie through Project Nat20. Details on personal data and your rights are in the privacy policy. Any question: contact@project-nat20.com.