Cookies & tracking
Draft pending final legal review before public launch. It isn't legal advice.
We try to use as little of your device as possible. Here's everything RPG Enclave stores on it and why.
Strictly necessary (always on, no consent needed)
- Login session — a cookie that keeps you signed in after you use your email link or Discord. Set by our auth provider (Supabase).
- Security check — when enabled, Cloudflare Turnstile may set a short-lived cookie at login to tell humans from bots.
Functional storage (in your browser, not sent to us as tracking)
- Card drafts — while you build a card before publishing, it's saved in your browser's local storage so you don't lose it. It stays on your device until you publish or clear it.
- Quiz progress — a short-lived session value while you answer card prompts.
Analytics (no cookies)
- PostHog — we measure aggregate feature usage, including anonymous click and navigation patterns, but without any cookie (in-memory only), with session recording switched off, and your events tied only to a one-way hashed id, never your email or handle. Hosted in the EU.
- Vercel Speed Insights — anonymous page-speed measurements, no cookie.
What we don't use
No advertising cookies, no cross-site trackers, no third-party marketing pixels. That's why you won't see a cookie consent pop-up. If we ever add anything non-essential, we'll ask first.
Questions: contact@rpgenclave.com.