1. What Are Cookies?

Cookies are small text files placed on your browser by websites you visit. They allow a site to retain certain information — like a security session token — between page loads. Cookies can be set by the site itself ("first-party cookies") or by third-party services embedded on that page ("third-party cookies").

Not all cookies track you — some are strictly necessary for a site to operate securely, while others, like analytics cookies, measure aggregate usage to help improve a site.

2. Cookies and Local Storage We Use

We use two kinds of cookies: strictly necessary security cookies set by Cloudflare's infrastructure, and first-party analytics cookies set by Google Analytics 4 and PostHog. The only cookies of our own are the three the player community needs to sign you in, and they are set only if you join it. We also keep four settings in your browser's local storage — a storage area that, unlike a cookie, is never attached to a request and never leaves your device — and PostHog, once you accept it, keeps its state there and in the tab's session storage too. They are listed here because the law treats stored settings the same way as cookies.

The table scrolls sideways — swipe to see Duration and Category.

Cloudflare may occasionally set additional short-lived security cookies as part of its bot detection and DDoS protection system. All such cookies are strictly necessary for the secure operation of the Site and contain no personally identifiable information.

For details on how Cloudflare uses these cookies, see Cloudflare's Cookie Policy.

Cloudflare Web Analytics also runs for every visitor: Cloudflare's network adds its script to the pages it serves to a browser, and it counts visits and measures how fast pages load. It sets no cookie and stores nothing on your device, which is why it is not in the table above and does not wait for the banner. What it collects is listed in section 2 of the Privacy Policy.

3. What We Don't Use

We do not use, and have no plans to introduce, any of the following:

• Advertising or retargeting cookies — this website has no advertising network integrations (no Google Ads, no Facebook Pixel, no programmatic advertising). The Color Drain app is different: it shows ads through Google AdMob, which, for players aged 18 and over, uses your phone's advertising ID rather than cookies — see section 7 of the Privacy Policy.
• Social media tracking cookies — we do not embed social login buttons or tracking pixels from any social platform. (The community's “sign in with Google” and “sign in with Apple” are plain links to Google's and Apple's own sign-in pages, not embedded widgets, and set no Google or Apple cookie on this site.)
• Personalisation or profiling cookies — we do not use cookies to build user profiles or to track behaviour across sites. (Your language preference is kept only in your browser's local storage and is never sent to us.)

4. Consent and Cookie Banners

Strictly necessary cookies — those that are technically required for a website to operate securely and correctly — are universally exempt from user-consent requirements. These cookies exist to protect you (from bot attacks and insecure connections), not to collect data about you. Disabling them would break the service, so asking for consent to set them would be meaningless.

Our only non-essential cookies are the Google Analytics and PostHog cookies listed in section 2, and we ask before setting them. A consent banner appears on your first visit to any page on this Site.

Google Analytics is not loaded at all until you choose Accept. On a first visit — and for as long as you have not accepted — no Google script runs on this Site, no Google Analytics cookie is written, no analytics identifier is stored on your device, and nothing is sent to Google. Choosing Accept loads it, with Google Consent Mode v2 set so that analytics storage is granted and every advertising signal is denied. Choosing Reject — now or later — stops it and deletes any _ga cookies already in your browser from an earlier visit, so withdrawing consent removes the identifier rather than merely stopping new ones. Ignoring the banner has the same effect as rejecting, minus the deletion.

PostHog works the same way: its script is not downloaded at all until you choose Accept. It reaches PostHog through our own address (rdd-labs.com/ingest), which passes on neither your cookies nor your IP address, and it never records the contents of form fields. Choosing Reject — now or later — stops it and deletes its ph_ cookie and stored state, keeping only the small opt-out flag listed in section 2, which holds no identifier.

Your choice is stored in your browser's local storage under the key rdd-consent. That is not a cookie: it is never attached to a request and never leaves your device, so neither we nor Google can read it. If your browser blocks local storage — private browsing, or site data disabled — the choice cannot be remembered, so we treat that as denied and the banner asks again on your next visit. Clearing your browsing data also clears the choice.

You can change your decision at any time, from this page:

Your browser's own cookie controls (section 5 below) and Google's official Analytics Opt-out Add-on also work and remain available, but they are secondary: the banner above is the direct control for this Site, and it is the one that takes effect before any Google script loads.

If we ever introduce cookies that require consent for a different purpose (for example, advertising cookies), we will extend this mechanism before setting them, and update this policy to reflect the change.

5. Managing and Disabling Cookies

You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies (such as Cloudflare's security cookies) may prevent parts of the Site from working correctly.

Industry opt-out tools such as the NAI Opt-Out Tool and Your Online Choices are designed for advertising and tracking networks. Since this website uses none of those, these tools have no effect on it — but they may be useful when visiting other websites.

6. Changes to This Policy

We will update this Cookie Policy if we introduce new cookies or change how we use existing ones. The "Last updated" date at the top of this page will always reflect the most recent version.

Material changes — for example, if we were to introduce non-essential cookies — will be communicated through a site notice or by email to subscribers.