Cookie Policy
Necessary play2gether.fun cookies, their duration, and how to manage them.
1. What we use
A cookie is a small piece of data stored by a browser and sent with later requests. play2gether.fun uses first-party, strictly necessary cookies for accounts, room participation, and language choice. They are not used for advertising or cross-site profiling.
2. Account cookie
sg_session contains a random sign-in token and lasts up to 30 days. It uses HttpOnly, SameSite=Strict, and Secure in production over HTTPS, and client JavaScript cannot read it. The server stores only the token hash. Signing out removes the current cookie and server session.
3. Room player cookie
sg_player contains a random player secret and is scoped to the relevant room API. It lasts up to 24 hours and uses HttpOnly, SameSite=Strict, and Secure over HTTPS; the server stores only its hash. It lets the Service recognize a player and show role-specific game state.
4. Language cookie
p2g_locale stores a manual RU, EN, or ES interface choice for up to one year. It uses SameSite=Lax and Secure over HTTPS. The Polish legal version is available directly at /pl/legal and does not add Polish as a general interface language.
5. Stripe and Resend
When you continue to Stripe-hosted Checkout, Stripe uses technologies needed for payment, security, and fraud prevention under stripe.com/privacy. Resend sends email and does not set advertising cookies through play2gether.fun.
6. Consent and controls
Strictly necessary cookies support requested features and security. Where the law exempts them from prior consent, no consent banner is shown. If optional analytics, advertising, or similar storage is added, it will stay off until the user makes any legally required choice.
You can delete or block cookies in browser settings. Removing sg_session signs you out, sg_player removes your former room role, and p2g_locale removes the saved language. Blocking necessary cookies may prevent accounts, rooms, or checkout from working; clearing a browser does not automatically erase server data.
7. Updates
We update this list and date when a technology or duration changes. Send browser-storage questions to privacy@games.enterprises.