Essential first-party session
phattony_session is a first-party, HttpOnly cookie with SameSite=Lax, path / and a 30-day lifetime. Its unguessable value identifies a server-side session, not an email address or password. The session keeps account or guest access, form-security state, essential acknowledgement and motion preference together. A production HTTPS deployment adds Secure.
Stored preferences
The motion choice is stored in the server session. A registered player's lantern light and reminder preference are stored with the player record. They are functional choices, not advertising profiles. No localStorage or third-party tracking cookies are used.
Game recovery and reminder storage
Two functional sessionStorage records are scoped to the current player and browser tab: phattony.pending stores an unresolved request identifier, game route and play level or bonus action so a retry cannot charge twice; phattony.clock stores the next session-reminder time. A confirmed request removes its pending record. These records have no passwords, email addresses or advertising identifiers. Deleting them does not delete a server-saved round; returning to the same account restores its latest round and unresolved choice.
Optional tracking
No analytics, marketing cookies or third-party sign-in are enabled. There is no active optional category to consent to, and declining optional tracking does not remove account access. If optional services are introduced, the notice and preference controls must describe their actual operation first.
Changing your choices
Open Cookie Preferences from the footer to save a motion choice or review the essential-session acknowledgement. Your device's reduced-motion setting takes priority. Browser controls can delete or block cookies, but removing the essential session signs you out and may lose an unregistered guest pass.
Recovery-link handling
A recovery token is carried in the URL fragment and copied into the password-reset form. The page clears that fragment from the address bar. It is not an analytics identifier and should never be shared.
Questions and updates
This inventory describes the current product configuration as of 5 November 2026. Use the Support page or hello@phattony.com if a storage behaviour appears inconsistent with this notice.
Questions? Save a support request or use hello@phattony.com.