Legal
Cookie Notice
Last updated: 15 September 2026
What this notice covers
This notice explains the cookies and equivalent technologies that pyrekin.com places on your device, what each one is for and how long it lives. “Cookie” is used loosely throughout: the same rules apply to the localStorage entries listed below, because they store data on your device in the same way.
The data controller is Pyrekin OÜ, company registration № 17573421, Tartu mnt 84a, 10112 Tallinn, Estonia. How we handle personal data more generally is set out in our Privacy Notice.
How your choice works
On your first visit a banner asks you to choose. The strictly necessary and functional entries are set either way — without them you cannot sign in and the game cannot remember your run. Both are first-party and stay on your own device.
The analytical category is the one your choice governs. Nothing in it loads until you press Accept all; choosing Essential only, or closing the page without choosing, means the Google Analytics script is never requested and none of its cookies are written. We set nothing at all in the marketing category.
Your choice is recorded on your own device and is not tied to your account, so it is per-browser. You can change or withdraw it at any time — see Withdraw or change your choice at the bottom of this page.
The cookies we use
Every entry we set is listed here by category. Names are exact — you can verify them in your browser’s developer tools under Application → Storage.
Strictly necessary
Always onWithout these the site cannot do what you asked it to do — sign you in, keep you signed in, and protect the forms you submit. They are set on the basis of our legitimate interest in operating the Service, so they do not require your consent and cannot be switched off from the banner.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
__Secure-authjs.session-token | Pyrekin (first party) | Keeps you signed in. HTTP-only and Secure, so it is unreadable to scripts. | 30 days |
__Host-authjs.csrf-token | Pyrekin (first party) | Cross-site request forgery protection for sign-in and account forms. | Session |
__Secure-authjs.callback-url | Pyrekin (first party) | Returns you to the page you were on after signing in. | Session |
pyrekin.cookie-consent.v1 | Pyrekin (localStorage) | Remembers your cookie choice so the banner is not shown again. | Until you clear it or revoke consent |
Functional
Always onThese remember what you were doing so the game is playable across visits — an active run survives closing the tab, your volume setting survives a reload. Every one is a localStorage entry written on your own device by the game itself, read only by Pyrekin and never sent to a third party or used to identify you, so they are necessary to deliver the service you asked for and are not gated by the banner.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
pyrekin.run.v1 | Pyrekin (localStorage) | Your active run — map position, deck, relics, HP — so closing the tab does not end the climb. | Until the run ends or you clear it |
pyrekin.settings.v2 | Pyrekin (localStorage) | Audio volume, animation speed and other display preferences. | Until you clear it |
pyrekin.cart.v1 | Pyrekin (localStorage) | The contents of your shop cart between visits, so it is not emptied if you navigate away. | Until checkout or you clear it |
pyrekin.cosmetics.v1 | Pyrekin (localStorage) | Which cosmetics you currently have equipped. | Until you clear it |
pyrekin-records, pyrekin-achievements, pyrekin-ascension, pyrekin-embers, pyrekin-tutorial | Pyrekin (localStorage) | Local mirrors of your run records, achievements, ascension level, ember balance and tutorial progress, so the interface renders before your account data loads. | Until you clear it |
Analytical
Consent requiredThese tell us how many people visit, which pages they read and where they give up, so we can fix what is broken. They are set by Google Analytics 4, a third-party provider, and the data is processed by Google outside the EEA under the EU–US Data Privacy Framework. They carry no advertising identifiers and we do not use them to build cross-site advertising profiles.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics (third party) | Distinguishes one visitor from another so repeat visits are not counted twice. | 2 years |
_ga_HJGHV1SKTF | Google Analytics (third party) | Holds the session state for this specific property. | 2 years |
Marketing and advertising
Consent requiredWe set none. Pyrekin runs no advertising, no retargeting pixels, no social-network trackers and no cross-site advertising profiles. This row exists so you can see the category is genuinely empty rather than merely unmentioned.
No cookies in this category.
Cookies set by other people
Two things on the site are served from elsewhere and are worth naming explicitly. Google Analytics is covered in the table above. Web fonts are served by Google Fonts, which sets no cookies but does see the IP address of the request. Nothing else on pyrekin.com loads third-party scripts — the game itself, its art, audio and video are all served from our own infrastructure.
Managing cookies in your browser
Independently of the banner, every major browser lets you block or delete cookies and site data — usually under Settings → Privacy. Clearing site data for pyrekin.com removes everything in the table above, including your consent record, so the banner will reappear.
Two things to expect if you block strictly necessary cookies: you will not be able to stay signed in, and an active run stored only on your device will be lost. Signing out clears the session cookie on its own; abandoning a run from the in-game header clears the local run state.
Withdraw or change your choice
Under Article 7(3) GDPR consent must be as easy to withdraw as it was to give. The button below clears your stored choice and reloads the page so the banner reappears and you can choose again. Withdrawing consent does not affect the lawfulness of anything done before you withdrew it.
Current choice: Loading…
Withdrawing takes effect at once: the analytics script is unloaded and its cookies are deleted. It does not affect the lawfulness of processing carried out before you withdrew.
Questions about this notice, or a request to exercise any of your data protection rights: hello@pyrekin.com.