Session cookie
_stolave_session is a first-party encrypted cookie for authentication, form-security tokens and temporary messages. It expires after 12 hours, is HttpOnly and uses SameSite=Lax.
Essential browser state
Session storage keys beginning nbs:round: keep interrupted round identifiers so retrying cannot debit twice. Keys beginning nbs:reminder: remember a dismissed session reminder for the current tab session. The local storage key st:collection keeps guest bookmarks on this device; when you sign in, those games are added to your account and the imported guest entries are cleared. Signed-in collections are stored on the server and follow your account across devices. The st:recent key keeps recently viewed games on this device, st:effects stores your reduced-effects choice, st:close-best remembers your best Close Looking streak, and st:prints keeps up to twelve small copies of your Curator sketches so the Prints page can show them. The Doodle Curator reads your drawing inside your browser to suggest a game; the drawing is never uploaded or stored, and a print is only saved if you choose to download it. Clearing your browser storage removes these lists. Display, sound and reminder preferences are stored with your account. Cloudflare may set essential security cookies when protecting requests.
Remembering your choice
The first-party nbs_analytics_consent cookie remembers whether you allowed or rejected analytics for 180 days. It is used only for this preference. You can change the choice at any time using Cookie preferences in the footer. Removing the preference cookie will make us ask again.
Optional analytics cookies
The Google tag script loads on every page, but analytics measurement and cookies remain disabled until permission. After permission, Google Analytics may set _ga and _ga_* cookies to distinguish browsers and sessions. Recognised campaign parameters can be measured for attribution; private pages, searches and non-campaign query parameters are excluded. This site sets Analytics cookies' maximum lifetime to 180 days without extending it on each visit. Rejecting or withdrawing consent stops measurement and removes accessible Analytics cookies; the tag script remains installed.
Browser controls
You can delete or block cookies in your browser. Blocking the essential session cookie prevents login and may cause secure forms to fail. Signing out clears the authenticated session. Private windows may discard session information when closed.
Policy changes
If optional tools are introduced later, their purposes, providers and lifetimes must be disclosed and the appropriate choice offered before activation. This policy will be updated to reflect actual storage. Questions can be recorded through Support.
Cookie policy · Cookie preferences
Questions? Contact Stolave · hello@stolave.com