Cookie Policy

1. Strictly necessary cookies

• Refresh session cookie (httpOnly) — keeps you signed in between visits. It cannot be read by JavaScript and is used only to obtain a new access token.
• CSRF token cookie — a non-sensitive token paired with the session cookie to prevent cross-site request forgery on the sign-in refresh.

These are essential to the Service and cannot be disabled while remaining signed in.

2. Local storage (not a cookie, same purpose)

A small number of browser localStorage entries remember interface preferences on your device only — for example, whether a sidebar is collapsed. Nothing here identifies you or is sent to our servers.

3. Advertising

Ad banners on GameOfChess are served directly by us from campaigns configured by our own team — not by a third-party ad network. We do not use third-party advertising or tracking cookies at this time.

4. Analytics

We do not currently use third-party analytics or tracking cookies.

5. Managing cookies

Most browsers let you block or delete cookies through their settings. Blocking the essential cookies above will sign you out and may prevent you from staying signed in.

6. Changes to this policy

If we introduce analytics or third-party advertising in the future, we will update this policy first. See our Privacy Policy for how we handle personal data more broadly.

7. Contact

Questions about this Cookie Policy can be sent to hello@whizzact.com.