Cookies and similar technologies
This page describes the cookies and similar technologies used by Warpfall, what they are for, and how you can control non-essential categories (such as analytics and marketing). This information is provided for transparency under the GDPR and EU ePrivacy rules.
When we ask for your choices again
If we introduce new optional tools (for example analytics or advertising), change providers, or materially change how optional categories work, we raise an internal consent policy version in the application configuration. Your browser compares that number to the version stored with your saved preferences. When they no longer match, the cookie banner is shown again so you can confirm or change your choices before any new optional processing starts. The current policy version is 2.
Consent categories (banner)
- Strictly necessary — Required for security and core functionality (for example keeping you signed in, protecting forms). These are not driven by optional marketing or analytics switches.
- Analytics — Measures anonymous visits to public pages, page views, referrers, and campaign (UTM) parameters. The self-hosted analytics code and storage are part of this application and activate only after you opt in. Signed-in, game, administration, API, and account-token pages are not measured.
- Marketing — Would support advertising or cross-site profiling (not currently used on this site). If added later, activation will require your opt in.
Cookies set by this application
| Name | Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|---|
| _galaxy_session | First party | Stores your session (logged-in state, flash messages, and related server-side session data). | Browser session (cleared when you close the browser), unless configured otherwise. | Strictly necessary for operating the signed-in experience. |
| remember_user_token | First party | Keeps you signed in when you choose «Remember me» on login. | Up to 2 weeks while the option is active (Devise default). | Strictly necessary for the «Remember me» feature you request. |
| ahoy_visit | First party | Distinguishes page views belonging to one anonymous visit on public pages. | 4 hours. | Optional analytics; set only after your consent. |
| ahoy_visitor | First party | Recognises an anonymous returning visitor for unique-visitor statistics. | 12 months. | Optional analytics; set only after your consent. |
How your consent choices are stored
Your cookie banner choices are stored in your browser's local storage under the key galaxy_cookie_consent_v1 (selected categories, consent policy version, and time of decision), not in a cookie. The record is never sent to the server and stays in your browser until you clear site data. We need it to remember your decision and avoid showing the banner repeatedly.
Analytics data storage
Analytics data is retained in this application's PostgreSQL database for 24 months; a daily retention job deletes records older than 24 months. It contains the anonymous visit and visitor identifiers, page views of the listed public pages, referrer without query or fragment, permitted UTM campaign parameters, and a masked IP address. It is not linked to your account and is not geolocated. Revoking consent stops new measurement and removes both Ahoy cookies; previously collected records remain until retention cleanup.
Third-party resources loaded by pages
Some assets are loaded from external networks. Your browser may contact those hosts (similar to a normal page request). Third-party cookie behaviour depends on the provider; we do not rely on third-party advertising cookies in this application today.
Google Fonts
| Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|
| Third party (Google) | Delivers web font files and CSS for typography. | Depends on Google; not controlled by this app. | Loaded without a separate consent switch today; consider self-hosting fonts for stricter setups. |
cdnjs (Font Awesome stylesheet)
| Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|
| Third party (Cloudflare cdnjs) | Delivers Font Awesome CSS used for icons in parts of the UI. | Depends on the CDN; not controlled by this app. | See above; loaded as a stylesheet reference. |
Fakaheda.eu (hosting provider logo)
| Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|
| Third party (Fakaheda.eu) | Delivers the hosting provider logo image on the landing page and the «About» page. | Depends on the provider; not controlled by this app. | See above; loaded as an image reference. |
Last updated: July 24, 2026