Your cookie choices
Review each category and every storage item below before saving. Essential items cannot be disabled.
Essential
always onRequired for login, security, and saving your game progress.
| Name | Storage | Provider | Duration | Purpose |
|---|---|---|---|---|
Supabase auth session sb-*-auth-token | cookie | Supabase (EU where configured) | Session / refresh rotation | Keeps you signed in securely. |
Staging gatekeeper questelix-authorized | cookie | Questelix | Session | Pre-launch access control when enabled. |
Language preference NEXT_LOCALE | cookie | Questelix | 1 year | Remembers EN or DE. |
Gameplay progress questelix.active-quiz-run, questelix.quest-run-* | localStorage | Questelix | Until cleared | Resume active quiz runs and quest progress. |
Daily puzzle state questelix.daily-word-* | localStorage | Questelix | Until UTC midnight / cleared | Tracks today’s daily word completion. |
Guest reward claim questelix.guest-pending-rewards | localStorage | Questelix | Until claimed or cleared | Holds pending rewards before sign-up. |
Onboarding profile questelix.onboarding-profile | localStorage | Questelix | Until cleared | Local display preferences during onboarding. |
Cookie choice record questelix.analytics-consent.v2 | localStorage | Questelix | Until reset | Stores your consent decision. |
Cookie choice mirror questelix_analytics_consent | cookie | Questelix | 1 year | Server-side check for analytics API. |
Analytics
optionalOptional first-party funnel stats and campaign tags — no ad trackers.
| Name | Storage | Provider | Duration | Purpose |
|---|---|---|---|---|
Product funnel events product_events (server DB) | cookie | Questelix / Supabase | Server retention policy | Aggregated taste/signup/run stats in our database. |
Campaign attribution questelix.attribution | sessionStorage | Questelix | Browser session | UTM tags from social links for funnel reporting. |
Legal detail: Full cookie policy
1. What we use
- Strictly necessary: session/auth (e.g. Supabase auth cookies, staging gatekeeper cookie
questelix-authorizedwhen pre-launch gate is on). - Preferences: locale (EN/DE) via URL or Next.js locale cookie where set.
- Analytics (with consent): first-party funnel events in our database and optional UTM campaign tags in session storage — only after you accept the banner (ePrivacy / UK PECR / DE TTDSG §25).
- Gameplay (device storage): active run progress, daily puzzle state, guest rewards, and onboarding in browser
localStorage— needed so you do not lose progress (contract / legitimate interest).
2. Managing cookies
You can block or delete cookies and site data in your browser. Strictly necessary storage (auth, gameplay resume) is required for login and play. Analytics runs only after opt-in; reject the banner or use footer Cookie preferences to withdraw consent.
3. Inventory (summary)
- Supabase auth cookies — signed-in session.
- NEXT_LOCALE (if set) — language preference.
- questelix-authorized — staging gatekeeper only when enabled.
- questelix.analytics-consent.v2 + questelix_analytics_consent cookie — your analytics choice.
- questelix.attribution (sessionStorage) — UTM tags only after analytics accept.
- Gameplay keys (localStorage) — run resume, daily word, guest rewards, onboarding.
4. Third parties (when used)
Stripe may set cookies during checkout. Cloudflare Turnstile (when enabled) may use storage for bot protection — we will update this page before enabling captcha. We do not use advertising or social tracking pixels.