What cookies are
A cookie is a small text file saved in your browser when you visit a site. Similar technologies such as local storage (localStorage) can serve the same purposes. In this policy we call all of them “cookies”.
You can find how personal data is processed in the Privacy Policy.
Categories
- Strictly necessary: needed to keep your session, ensure security and run a feature you asked for (for example a game save). No consent is requested; if you block them in your browser the Portal may not work.
- Preferences: remember choices such as language. The Portal itself currently sets no preference cookie; the language is kept in the address (/tr, /en). Games may store their own preferences only when opened outside the Portal.
- Analytics: measure how the Portal is used. Set only if enabled and you give consent.
- Advertising: show and measure ads on Portal pages. Set only if enabled and you give consent.
Necessary cookies
| Name | Purpose | Duration | Category | Set by |
|---|---|---|---|---|
| __Host-gp.session_token | Keeps the guest or account session. Set with HttpOnly, Secure and SameSite=Lax and no Domain attribute: page scripts cannot read it, and it goes only to the Portal address, never to games. | 400 days; renewed on every visit. A guest ID not used for 90 days is deleted on the server and the cookie stops working. | Strictly necessary | Portal |
| __Host-gp_consent | Remembers your cookie choice (analytics, advertising, version and time) so it is not asked on every page. It goes only to the Portal address and has no Domain attribute. | 180 days | Strictly necessary | Portal |
| Cloudflare Turnstile (challenges.cloudflare.com frame) | Performs the bot check when a guest session is created (an account is always created from a guest session). The check runs in a frame at Cloudflare's own address; it sets no cookie on the Portal address and is loaded only when a guest session is about to be created. | For the duration of the check | Strictly necessary | Cloudflare (third party) |
Rate limiting (Valkey on our own server) and error monitoring (Sentry) use no cookies or local storage in your browser: the counters are kept on the server and the Sentry client runs with session replay off. The Portal's public demo, which runs on an in-memory server instead of the database, keeps the guest session in the gp_session cookie (30 days, HttpOnly, SameSite=Lax); this cookie is not used in the real installation.
Consent-based cookies
The cookies below are set only if the relevant service is enabled and you consented to the relevant category in the cookie notice. If you do not consent, they are not set.
| Name | Purpose | Duration | Category | Set by |
|---|---|---|---|---|
| ph_<project-key>_posthog (cookie) and ph_<project-key>_… entries in session storage | Product analytics (PostHog): measures page and game use with a pseudonymous ID. The session storage entries tell the browser tabs and visits apart. | Cookie: 365 days. Session storage: until the tab is closed. Both are deleted when you withdraw consent. | Analytics | PostHog (third party) |
| __gads, __gpi, __eoi and others set by the ad provider | Showing and measuring ads on Portal pages. Personalised ads are shown only with this consent. | __gads and __gpi: up to 13 months; __eoi: up to 6 months (Google sets the durations). The Portal deletes them when you withdraw consent. | Advertising | Google AdSense (third party) |
| FCCDCF, FCNEC (and __gads, __gpi listed above) | Google's own consent message (Privacy & messaging, TCF v2.2) remembers your advertising choice. Set by Google's message, mainly for visitors in the European Economic Area, the United Kingdom and Switzerland, and only if the Portal's operator has switched it on; there it replaces the advertising choice of the Portal's cookie notice, which then asks about analytics only. | Up to 13 months (Google sets the durations) | Consent record | Google (third party) |
Games' own storage
Games run at a separate address from the Portal and that address sets no cookies. When a game is opened inside the Portal, its save is kept on the server and is not written to your browser's local storage. The entries below can appear in your browser only when a game is opened outside the Portal, at its own address.
| Name | Purpose | Duration | Category | Set by |
|---|---|---|---|---|
| simitsarayi.v1 | Keeps the game save when Simit Sarayı is opened outside the Portal. | Until you delete it | Strictly necessary | Game address (local storage) |
| <game-id>:save | The default save a game opened outside the Portal writes through the SDK bridge. | Until you delete it | Strictly necessary | Game address (local storage) |
| <game-id>:lang | Remembers the language you chose with the language button of a game opened outside the Portal. | Until you delete it | Preferences | Game address (local storage) |
Managing your consent
- A cookie notice appears on your first visit. Accepting all, continuing with only the necessary ones, and choosing categories one by one are offered with equal prominence.
- If you do not consent, analytics and advertising cookies are not set and no personalised ads are shown; the Portal still works.
- You can change your choice or withdraw consent at any time with the “Cookie settings” link at the bottom of the page.
- When you withdraw consent no new data is collected; you can also delete cookies set earlier in your browser settings.
Browser settings
Most browsers let you see, delete and block cookies. Where the settings are differs by browser; see your browser's help page.
If you block or delete the necessary cookies your guest session ends and you may lose access to the progress tied to that guest ID. You can create an account to keep your progress.
Changes and contact
We update this policy when the cookies we use change; the date of the current version is at the top of the page. For questions: [to be filled: company name], [to be filled: address], [to be filled: contact e-mail].