Cookie Policy
Effective date: 2026-07-23 · Last updated: 2026-08-12 · Version: 1.0.0
1. Scope
This policy covers cookies and similar browser storage used by Romergo. The current code audit found Clerk authentication storage, first-party application preferences and drafts, and first-party product analytics identifiers. No advertising network or third-party marketing tracker was found in the audited application code.
2. Current categories
| Category | Purpose | Current examples | Optional |
|---|---|---|---|
| Strictly necessary | Sign-in, session security, route protection, abuse prevention, consent choice, and core application operation | Provider-managed Clerk authentication cookies or storage; `romergo.cookies.consent` in local storage | No |
| Preferences | Remember language, theme, sidebar state, editor and form drafts, playback progress and volume, and offline quests on the device | `lang`, `theme`, `sidebar_state` cookie and local storage, `romergo:guest-progress:v1:*`, draft keys, `romergo-player-quest-cache-v1` | Depends on the preference and local rules |
| Analytics | Measure routes, feature use, reliability, and registration attribution with pseudonymous first-party identifiers | `romergo.analytics.anonymousId`, `romergo.analytics.sessionId`, `romergo.analytics.attribution`, and the shared `romergo_audience_attribution` cookie | Yes where consent is required |
| Marketing | Advertising profiles, cross-site targeting, or advertising conversion tracking | None found in the audited application code | Not currently used |
Exact names used by Clerk can change as the authentication provider evolves. Review the live browser storage and provider documentation before activating this policy.
3. Managing storage
You can clear site data in your browser. Doing so may sign you out, reset language or editor preferences, remove offline data, and create a new pseudonymous analytics identifier. Where a consent control is shown, rejecting non-essential storage prevents optional analytics storage from being created after that choice.
4. Duration
Authentication duration follows the configured Clerk session. The `sidebar_state` cookie lasts up to 7 days and is refreshed when the setting changes. Session-storage analytics values normally last until the browser session ends. The shared analytics-attribution cookie lasts up to 90 days after the latest consented Landing visit. Local preferences, consent choice, offline data, drafts, guest progress, and the anonymous analytics identifier remain until the application replaces them or you clear site data. Optional analytics storage, including the shared attribution cookie, is removed when you reject non-essential storage.
5. Changes and contact
This policy must be updated before adding a new analytics or marketing provider. Questions can be sent to [email protected].