01 · Current position
No non-essential cookie banner when there are no non-essential cookies.
The public atlas and educational tools do not currently read or write document cookies, localStorage or sessionStorage. The account API uses an Authorization bearer token rather than an authentication cookie. Game launch tickets and game-session tokens are short-lived credentials passed through requests and should be held only in memory by the client.
Server and delivery logs are not cookies. They may still process request metadata as described in the Privacy Policy.
- +Advertising cookies: none
- +Analytics cookies: none
- +Social tracking pixels: none
- +Current browser tool input: processed in page memory
02 · Strictly necessary technology
Security state may be necessary when account UI launches.
We may use strictly necessary storage for sign-in, security, load balancing, language, checkout continuity or fraud prevention. Such technology cannot be switched off through a consent panel if the requested service cannot function without it, but it will be documented with name, provider, purpose and lifetime.
Do not store bearer tokens in long-lived, script-readable browser storage unless a documented security review approves that design.
- +Session credentials
- +CSRF or request-integrity values
- +Checkout continuity
- +User-requested language or accessibility preference
03 · Optional technology
Optional tracking requires a real choice.
Analytics, personalisation, advertising and cross-site technologies will remain off until the user makes an informed choice where consent is required. Rejecting optional technology must be as easy as accepting it, and withdrawal must be available later.
We will not treat continued browsing, a pre-ticked box or acceptance of the User Service Agreement as consent to unrelated tracking.
- +Purpose-specific choices
- +No default opt-in
- +No consent wall for ordinary public content
- +Consent records retained only as needed
04 · Controls and updates
Browser controls can remove storage, but may sign you out.
You can inspect and delete site data through browser settings. Blocking necessary storage may prevent sign-in or checkout. Privacy or Global Privacy Control signals will be honoured where legally required and technically applicable.
Before adding a provider, we will update this table, the Third-Party Processing List and any consent interface. Contact hello@ageofseas.com with [PRIVACY] for questions.
- +Review after every analytics, payment or support integration
- +Document first- and third-party domains
- +Document exact expiry, not vague 'persistent' labels
- +Re-consent if a purpose materially changes