01 · Current position
Basic audience measurement is enabled by default.
Google Analytics may set _ga and a stream-specific _ga cookie to distinguish visits; Google normally configures these for up to two years, subject to browser controls and service configuration. You can block or remove these cookies in your browser.
The account API uses an Authorization bearer token rather than an analytics cookie. Server and delivery logs are not cookies but may process request metadata as described in the Privacy Policy.
- +Advertising cookies: none
- +Analytics cookies: enabled when GA is configured
- +Social tracking pixels: none
- +Public page paths exclude URL query strings
02 · Strictly necessary technology
Security state may be necessary when account UI launches.
We may use strictly necessary storage for sign-in, security, load balancing, language, checkout continuity or fraud prevention. Such technology cannot be switched off through a consent panel if the requested service cannot function without it, but it will be documented with name, provider, purpose and lifetime.
Do not store bearer tokens in long-lived, script-readable browser storage unless a documented security review approves that design.
- +Session credentials
- +CSRF or request-integrity values
- +Checkout continuity
- +User-requested language or accessibility preference
03 · Other technology
Advertising and personalisation remain separate.
The current Analytics configuration is for aggregate audience and game-entry measurement. Advertising, ad personalisation, Google Signals and social tracking are disabled.
A future advertising or materially different tracking purpose will require a separate review, updated disclosure and any choice required by applicable law.
- +No advertising signals
- +No Google Signals
- +No social pixels
- +No account identifier sent
04 · Controls and updates
Browser controls can remove storage, but may sign you out.
You can inspect, block and delete site data through browser settings. Blocking necessary storage may prevent sign-in or checkout. Privacy or Global Privacy Control signals will be honoured where legally required and technically applicable.
Before adding a provider, we will update this table and the Third-Party Processing List. Contact info@ageofseas.com with [PRIVACY] for questions.
- +Review after every analytics, payment or support integration
- +Document first- and third-party domains
- +Document exact expiry, not vague 'persistent' labels
- +Review again if a purpose materially changes