Overview
This Cookie Policy explains which cookies and similar technologies (local storage and session storage) PlayAndPatch uses.
In short: we only use first-party cookies and storage that are strictly necessary for the site to work or that remember your preferences. We don't use analytics, advertising or tracking cookies. The only exception is the strictly necessary security cookies that Cloudflare, which protects our site, may set when its bot protection or a security check needs them (see below); we don't allow any other third party to set cookies through our site.
Cookies and storage we use
The table below lists all the cookies and browser storage entries used by PlayAndPatch. All of them are first-party, meaning they are set directly by us on our own domain.
| Name | Purpose | Type | Duration |
|---|---|---|---|
pp_session | Keeps you signed in. Contains a random session token; our server stores only a hash of it. | First-party cookie (httpOnly), strictly necessary | 30 days, renewed while you use the site |
pp_locale | Remembers the interface language you use (Turkish or English). | First-party cookie, preference | 1 year |
pp_share_view | Remembers whether PS Share groups are shown as cards or as a forum list. | First-party cookie, preference | 1 year |
pp_oauth_state | Protects sign-in with Google or Discord against cross-site request forgery (CSRF). | First-party cookie, strictly necessary | 10 minutes |
pp_oauth_verifier | Stores the PKCE code verifier that secures the sign-in process. | First-party cookie, strictly necessary | 10 minutes |
pp_oauth_next | Remembers the page to return you to after signing in. | First-party cookie, strictly necessary | 10 minutes |
pp_signup | Marks the browser you signed up in, so that the address confirmation link signs you in only there. | First-party cookie (httpOnly), strictly necessary | 24 hours |
sidebar_state | Remembers whether the admin panel's sidebar is open or closed. Set only for team members. | First-party cookie, preference | 7 days |
pp-theme | Remembers your colour theme (dark, light or pink). | Local storage, preference | Until you delete it |
pp-footer-scene | Remembers the scene you picked for the bottom of the page (campfire or platformer). | Local storage, preference | Until you delete it |
pp-audio-rate | Remembers the playback speed you chose when listening to a story. | Local storage, preference | Until you delete it |
pp:viewed:<id> | Prevents the same game or news page view from being counted twice in a browser session. Contains no personal data and is never sent to our server. | Session storage, strictly necessary | Until you close the tab |
pp-beg-cta | Keeps the sign-in suggestion shown after many presses of the “Beg” button from appearing again in the same session. | Session storage, preference | Until you close the tab |
pp-extension-promo | Remembers when you closed the New Tab extension card on the home page, so it isn't shown again for 30 days. | Local storage (localStorage), preference | Until you delete it |
pp-explorer-view | Remembers whether the admin panel's file manager shows a list or a grid. Used only by team members. | Local storage (localStorage), preference | Until you delete it |
The pp_oauth_state, pp_oauth_verifier and pp_oauth_next cookies are only created while you sign in with Google or Discord, and they expire after 10 minutes at the latest.
Cookies set by Cloudflare. Traffic to our site and our file host goes through Cloudflare on our behalf. Only when its bot protection or a security check needs them, Cloudflare may set its own strictly necessary security cookies: __cf_bm (bot protection) and cf_clearance (remembers that you passed a security check). These cookies are set by Cloudflare, not by us, and are used only for security. See the Cloudflare Privacy Policy for details.
No analytics, advertising or tracking
We don't use analytics services, advertising networks, social media plugins, tracking pixels or fingerprinting techniques. We don't set third-party cookies (Cloudflare's security cookies described above serve only to protect the site), and none of the storage we use is used to track you across other websites.
Why there is no cookie banner
Consent is required for cookies and similar technologies that are not needed to provide the service you have asked for — for example, analytics or advertising cookies.
Because we only use storage that is strictly necessary to provide the platform or that remembers your own preferences (such as language, theme and view), and Cloudflare's security cookies are strictly necessary too, no consent is required, which is why we don't show a cookie consent banner.
If we ever start using cookies or similar technologies that require consent, we will ask for your consent before using them and update this policy.
Third-party services
- Cloudflare: all traffic to our site and our file host (files.playandpatch.com) goes through Cloudflare. The security cookies it may set are described above; how Cloudflare processes data is explained in our Privacy Policy.
- Sign-in with Google and Discord: when you choose to sign in, you are redirected to Google's or Discord's website. These sites may set their own cookies on their own domains under their own cookie and privacy policies. These cookies are not set by PlayAndPatch.
- Game artwork: images from Valve's Steam content delivery network are usually delivered through our own image optimizer. If an image is loaded directly from Steam's servers, your browser connects to Valve's servers and Valve can see your IP address. See our Privacy Policy for details.
- External download links: websites you visit through “Go to source” links have their own cookie policies.
Managing cookies and storage
You can view, delete or completely block cookies and site data at any time in your browser settings. Please keep in mind that:
- if you block or delete the
pp_sessioncookie, you will be signed out, and you won't be able to sign in while cookies are blocked; - blocking the
pp_oauth_*cookies makes it impossible to sign in with Google or Discord; - if you block the
pp_signupcookie, the confirmation link still confirms your address but doesn't sign you in; you then sign in with your e-mail address and password; - if you delete
pp_localeorpp-theme, the site falls back to the default language and theme; - if you delete
pp_share_view,sidebar_stateorpp-explorer-view, the view concerned returns to its default; - if you block Cloudflare's security cookies, you may not be able to reach the site when a security check is shown;
- clearing session storage only means that a game page view may be counted again.
Changes and contact
If the cookies or storage we use change, we'll update this policy and the “Last updated” date at the top of this page.
If you have questions, contact us through the contact form or by e-mail at support@mucahid.dev.