Cookie and Storage Notice

Cookies we set

jwt — your sign-in token. Without it you cannot stay signed in or join a match. It is HTTP-only, so page scripts cannot read it, and it lasts 30 days, renewed each time the game checks who you are.

preferred_language — remembers the language you picked, so the site does not switch back on your next visit. It lasts a year.

Local storage

A few small things are kept in the browser's localStorage, none of them about you and none of them read by anyone but this site: preferred_language, a mirror of your language choice so it survives the cookie being cleared; cookie_consent, that you have read this notice, and when; soccerankia:install-dismissed, that you closed the offer to install the game as an app; soccerankia:sound, whether you switched the stadium sound off; soccerankia:music, whether you switched the menu music and sounds off; soccerankia:match-zoom, how far you zoomed in on your own player during a match; soccerankia.lastPitch, whether you last went to the online lobbies or to your Career, so the home page's button takes you back there; and one flag per Career season, soccerankia.career.championSeen.<season>, that the champion banner has been shown so it is not shown twice. For as long as one tab is open, sessionStorage may also hold soccerankia.pendingInvite: the invite code from a lobby link you opened, kept while you sign in so the link still takes you to that lobby, and deleted as soon as it has (or after half an hour); and soccerankia:music-position, how far each menu track had got, so that after a reload the music carries on from there instead of starting over.

None of those leaves your device, none of them identifies you, and clearing the site's data in your browser removes all of it.

One more thing is about you, and it does leave: a Career match that has not reached the server yet. A Career match plays in your browser, so while it is on, its latest checkpoint and, at the end, its result are kept under soccerankia.pendingMatch.<kind>.<match> — with the id of your account, so that only your own session ever sends it — and sent the moment there is a connection; once the server has answered for it, it is deleted. It is sealed so that it cannot be read or edited in storage: the key that seals it is made by your browser, cannot be taken out of it, and is kept in an IndexedDB database called soccerankia-vault, which holds nothing else. It is strictly necessary for the same reason the sign-in cookie is: without it, a match you played on a dropping connection would be lost.

Nothing else is written there.

The service worker also keeps a copy of the game's own pages, scripts and images in the browser's Cache Storage so the game opens quickly on a slow connection. It never caches anything from /api, so nothing about you or your matches is in it, and each new build of the game replaces it.

What we do not use

No analytics, no advertising, no social media pixels, no A/B testing tools, no session recording, and no third-party fonts or scripts: the one typeface is served from our own server. The Content Security Policy the site sends allows scripts, styles and fonts from this site only, so a third-party script could not load even by mistake.

Why there is nothing to accept or refuse

Both cookies above are strictly necessary to deliver the game you asked for, which is exactly the case in which consent is not required — and, for the same reason, not something we can offer. Nothing this notice covers is optional, so a notice with an Accept and a Refuse button would be offering a choice that changes nothing.

The notice you saw on your first visit therefore has one button. It records that you have read it, on your device only, and nothing about the game behaves differently either way.