Legal

Cookie Policy

Short version: four cookies we cannot run without, two that count visits, and nothing that follows you anywhere else.

Last updated 26 June 2026

What cookies are

Small files stored by your browser. Ours do two jobs: they keep you signed in, and they remember how you answered the cookie banner.

What we use

This is the complete list. We do not run advertising, and nothing here builds a profile of you or is sold to anyone. The two analytics cookies count visits so we can see which pages people actually use.

CookiePurposeTypeLifetime
fayyassalon-sessionKeeps you logged inEssential2 hours
XSRF-TOKENProtects forms against cross-site request forgeryEssential2 hours
remember_web_…"Keep me logged in" — only set if you tick the boxEssential400 days
cookie_consentRemembers how you answered the cookie notice, so we stop showing itEssential1 year
_gaGoogle Analytics — tells repeat visits apart from new onesAnalytics2 years
_ga_S8PW8Q1CCDGoogle Analytics — keeps session state for this siteAnalytics2 years

Who else is involved

Google provides our analytics, using the two cookies above. They tell us how many people visit and which pages they use — not who you are. We have IP anonymisation switched on, we do not run Google's advertising features, and we do not send Google your account details or anything about your play. Google processes this outside Canada, including in the United States.

Controlling cookies

The first four are essential: three keep you signed in and your forms safe, and the fourth records your answer so the notice does not return on every page. The two analytics cookies are not essential, and they do not run until you answer the notice — until then analytics storage is switched off, and if you decline it stays off.

You can clear any of them from your browser settings at any time. Doing so signs you out and brings the notice back; nothing else changes, and no gameplay, balance or progress is stored in a cookie.