Privacy controls
Cookie Notice
Version 1 · Last updated July 19, 2026
Your controls
Necessary cookies are always on because they provide sign-in, session security, and saved privacy choices. Analytics and Advertising are denied until you opt in. Rejecting optional cookies is as easy as accepting them, and you can revoke either choice at any time.
If your browser sends Global Privacy Control, FragLedger keeps Advertising off even if an earlier preferences cookie recorded an opt-in. Analytics remains a separate choice.
First-party cookie inventory
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
| __Host-fragledger_session | Necessary | Encrypted, HTTP-only Steam sign-in and session state. The development-only name is fragledger_session. | Up to 7 days |
| fragledger_cookie_preferences | Necessary | Stores consent-policy version, Analytics and Advertising choices, and the time they were saved. It contains no SteamID or advertising identifier. | 180 days |
Optional services
- Analytics: no analytics provider or analytics script is currently configured. Saving Analytics consent does not itself load one.
- Advertising: Advertising is currently disabled. Advertising consent is an additional required gate for a third-party advertising provider; it is not used to justify loading an otherwise unconfigured service.
- Steam may use its own cookies on steamcommunity.com while you are on Steam's sign-in page. Those cookies belong to Steam, not FragLedger.
Advertising safeguards
FragLedger's AdSense integration is fail-closed: the Google script stays out of the document unless the operator selects AdSense, provides a syntactically valid publisher client ID, explicitly marks a certified-CMP integration ready, enables the advertising build, provisions a numeric slot on a registered public-content placement, you grant Advertising consent, and Global Privacy Control is not active. Account, sign-in, onboarding, dashboard, lobby, search, status, and legal/privacy routes are excluded. Revoking consent reloads the page so an already-loaded provider script is removed.
House guides and direct sponsorship messages are rendered from FragLedger's own code and use no optional browser storage, remote image, tracking pixel, preconnect, impression beacon, or click tracker. A direct sponsor link is always labeled Sponsored, opens in a new tab without a referrer, and contacts the sponsor only after you choose to follow it. The destination then applies its own privacy practices.
This first-party choices panel is not represented as a Google-certified consent management platform. Before serving Google ads in the EEA, UK, or Switzerland, the site operator must separately implement a Google-certified CMP integrated with the IAB TCF. See Google's current CMP requirements.
Choice updates
A future material change to these categories will use a new consent version so an older cookie is rejected and the site asks again. Clearing browser cookies also clears your choice. For broader data practices, read the Privacy Notice.