A quick note about cookies.
We use only what the site needs to work: essential cookies for signing in and security, and a little browser storage for convenience. No tracking.
Plain-English draft. Have it reviewed by a lawyer before launch.
The short version
- We use essential cookies only: to keep you signed in and to protect sign-in forms.
- We don't use analytics or advertising cookies, and we don't let ad networks track you on our site.
- Some conveniences, like your favorite templates, are kept in your browser's local storage instead of a cookie.
- Because everything we use is essential, there's no cookie banner. If that ever changes, we'll ask first.
Cookies we use
Our sign-in system (NextAuth) sets these first-party cookies. The exact names can have a security prefix such as __Secure- or __Host- on the live site.
| Cookie | Purpose | Lasts |
|---|---|---|
| next-auth.session-token | Keeps you signed in | Until you sign out, or up to 30 days |
| next-auth.csrf-token | Protects sign-in forms from cross-site request forgery | Browser session |
| next-auth.callback-url | Returns you to the page you were on after signing in | Browser session |
| next-auth.state, next-auth.pkce.code_verifier | Secure the “Sign in with Google” flow (only if you use it) | About 15 minutes |
These are strictly necessary: without them you can't sign in. They aren't used for tracking or advertising.
Local storage
Local storage is space in your browser that only this site can read. It never leaves your device unless a feature sends it to us, and it isn't shared with third parties. We use it for:
- Favorites: the templates you've hearted, so they're there next time on this device.
- Template hand-off: when you open a template or an AI card in the editor, it's briefly stored so the editor can load it, then removed.
- Player name: the name you typed to join a live game, so you don't have to type it again.
Clearing your browser's site data removes all of these. Nothing breaks; you'll just lose your favorites on that device.
Payments & sign-in partners
When you pay, you're taken to Stripe's checkout or billing portal, and if you choose “Sign in with Google”, to Google. Those pages are run by Stripe and Google and may set their own cookies, including for fraud prevention, under their own policies. We don't control those cookies, and they aren't set on our pages.
Your choices
You can block or delete cookies in your browser settings. If you block essential cookies, signing in won't work, but you can still browse templates, read the help center and join live games as a guest.
If this changes
If we ever want to add analytics, advertising or any other non-essential cookies, we'll update this page and ask for your consent before setting them. You'll be able to say no without losing access to anything.
Questions? Email hello@bingocards.io or use our contact page. More about how we handle data is in our Privacy policy.