Lazy DragonCookie policy
Last updated:
This policy explains which cookies and browser storage lazydragon.app uses, what they do and how to remove them.
Technical storage and consent
Lazy Dragon uses the cookies and storage described here to provide website and app features. The website does not set advertising profiling or visitor analytics cookies. Tools that are strictly necessary to provide a requested service do not require a consent banner.
Cookies set by lazydragon.app
ded.locale remembers the interface language for one year. A copy of this preference in local storage may persist until site data is cleared.
Supabase cookies in the sb-…-auth-token family maintain your session. They may be split into numbered cookies. The client can set a technical lifetime of up to 400 days, and renewal by the website sets it to 7 days. Cookie expiry is separate from session validity, which may end earlier or be revoked.
The Supabase cookie ending in -code-verifier protects the code exchange during sign-in and other verification flows. It uses the client's technical lifetime and is removed when the flow consumes the code. Code validity is separate from cookie expiry.
ld_campaign_invite stores a shareable invite code after you choose to open it. It is limited to /invito, expires after 24 hours and is removed once you join the campaign. The invite link itself is valid for up to 7 days and the Master can revoke it sooner.
Browser storage and offline use
Local storage (localStorage) retains language, appearance and accessibility settings, gameplay preferences and drafts that help you resume your work. Some entries are removed when a feature completes or a draft is discarded. Others remain until replaced or until you clear site data.
Tab storage (sessionStorage) can hold temporary data for resuming some gameplay operations. It normally lasts for the tab's session. If you download a character sheet for offline use, the copy is stored in IndexedDB until removed. The service worker uses Cache Storage for public app files and replaces obsolete caches when the version changes.
External services and websites
If you choose Sign in with Google, your browser opens Google's pages, which have their own privacy notice. The same applies when you follow links to Discord, PayPal or other sites. When you view a portrait, cover or map with an externally hosted image, your browser may contact the image host.
How to remove cookies and local data
You can clear or block cookies and site data in your browser settings by looking for lazydragon.app. Clearing it can require signing in again, reset preferences and remove local drafts and offline copies. You can also remove individual offline sheets in the app. The privacy notice explains personal data processing, contacts and your rights.