ChillgameThis Cookie Policy explains how Chillgame uses cookies and similar technologies on chillgame.online and its game subdomains. It should be read together with our Privacy Policy. You can change your choice at any time using the button below.
1. What cookies are
Cookies are small text files that a website stores on your device. They let the site remember your actions and preferences (such as staying signed in) over time. We also use similar technologies — like local storage — for comparable purposes; we refer to all of them as “cookies” here. Cookies can be first-party (set by Chillgame) or third-party (set by another service we use), and either session cookies (deleted when you close your browser) or persistent cookies (which last for a set time).
2. How we use cookies
We use cookies to keep you signed in, protect against cross-site request forgery, remember your preferences (like language), and — only with your consent — to measure traffic and show advertising. Strictly necessary cookies are always on because the Service cannot work without them. Everything else is optional and controlled by your consent.
3. Categories of cookies we use
- Strictly necessary. Required to sign in, secure your session and run core features. Cannot be switched off.
- Preferences. Remember choices such as your language. Optional but improve your experience.
- Audience measurement (our own). A random visitor id and visit id that let us count new and returning visitors in aggregate. First-party, never shared. Not set once you refuse optional cookies.
- Analytics. Help us understand aggregate, anonymous usage so we can improve the games. Set only with consent.
- Advertising. Used by ad partners to show and measure ads where applicable. Set only with consent.
4. The cookies in detail
Strictly necessary — sign-in & security (set by Chillgame via our auth library; names are prefixed with __Secure- on the live site):
| Cookie | Purpose | Duration |
|---|---|---|
authjs.session-token | Keeps you signed in across the site and game subdomains. | Session / up to 30 days |
authjs.csrf-token | Protects against cross-site request forgery during sign-in. | Session |
authjs.callback-url | Remembers where to return you after sign-in. | Session |
authjs.pkce.code_verifier | Secures the OAuth sign-in exchange (PKCE). | 15 minutes |
authjs.state | Validates the OAuth sign-in request. | 15 minutes |
authjs.nonce | One-time value that hardens OpenID sign-in. | Session |
cg_device | A random identifier for this browser, shared across the game subdomains. It is how a signed-out player keeps one daily allowance instead of a fresh one on every game, and it is one of the signals we use to check that two accounts at the same table are not the same person. | 1 year |
Preferences & consent (set by Chillgame):
| Cookie | Purpose | Duration |
|---|---|---|
chillgame:lang | Remembers your chosen interface language. | 1 year |
chillgame:cookie-consent | Stores your cookie choices so we don’t ask every visit. | 6 months |
Audience measurement (set by Chillgame; removed, and not set again, once you refuse optional cookies or your browser sends Global Privacy Control):
| Cookie | Purpose | Duration |
|---|---|---|
cg_vid | A random visitor id, shared across the game subdomains, so our own statistics can tell a new visitor from a returning one. Used only for aggregate numbers and never sent to anyone else. | 13 months |
cg_sid | A random visit id that groups the pages of one visit, so we can count visits and pages per visit. | 30 minutes (renewed while you browse) |
Analytics & advertising (set by third parties, only after you consent):
| Provider | Purpose | Duration |
|---|---|---|
| Google Analytics 4 | Measures how many people visit, which games they play and how they got here, so we can improve the service. Sets cookies such as _ga and _ga_<stream id>, which hold a randomly generated identifier — not your name or email. | Up to 2 years |
| Google AdSense | Shows and measures ads and limits how often you see the same ad. Sets cookies such as __gads, __gpi and IDE. | Up to 13 months |
| Yandex.Metrika | Measures visits and traffic sources the same way, for the audience that reaches us through Yandex. Its Webvisor feature also records a replay of the session — mouse movement, scrolling and clicks — so we can see where a page confuses people. Sets cookies such as _ym_uid, _ym_d, _ym_isad and _ym_visorc, which hold a randomly generated identifier. Neither the script nor these cookies load at all unless you accept. | Up to 1 year |
Google Analytics and Google AdSense are provided by Google. To understand how Google uses the data it collects through them, see How Google uses information from sites or apps that use our services. We never send Google information that identifies you personally, such as your name or email address.
Yandex.Metrika is provided by Yandex, which processes the data on servers in the Russian Federation; see the Yandex Privacy Policy and the Metrica Terms of Use. Session replays are recorded only while you have accepted optional cookies, and we never send Yandex information that identifies you personally.
Exact cookie names and durations set by third parties are controlled by those providers and may change. If we are not currently serving ads or analytics, these cookies are not set.
5. Third-party cookies
When you sign in with a provider (Google, Discord, GitHub, Telegram) or make a payment through our payment provider, those services may set their own cookies on their own pages under their own policies. Live voice and video are delivered by our real-time provider. We do not control third-party cookies; please review the relevant provider's privacy and cookie policies for details.
6. Managing your cookies
- Use the Cookie preferences button on this page to accept or reject optional cookies at any time.
- Rejecting optional cookies also deletes the analytics cookies already stored on your device — including our own
cg_vidandcg_sid— and stops the scripts that set them. Our own measurement then counts page views without any id. - Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will break sign-in and core features.
- You can opt out of Google Analytics on every site you visit with Google's browser opt-out add-on, and out of Yandex.Metrika with Yandex's.
- You can opt out of personalised advertising via your Google Ad Settings and tools such as youronlinechoices.eu or optout.aboutads.info.
7. Do Not Track
Some browsers offer a “Do Not Track” (DNT) signal. There is no industry-wide standard for how to respond to it, so we do not currently respond to DNT signals. We instead rely on the cookie consent controls described above.
8. Changes to this policy
We may update this Cookie Policy as our use of cookies evolves. We will update the “Last updated” date above when we do. Significant changes may also be signalled by asking for your consent again.
9. Contact
Questions about cookies? Email support@chillgame.online or reach us on our Discord community.