Cookie Policy
Everything we put on your device, listed individually. Most of it is not a cookie at all — modern web apps store things in your browser rather than sending them back and forth on every request — but the rules are the same either way, so we treat them the same here.
Your choice
There is one decision to make: analytics, yes or no. Everything else is needed to make the site and the game work, cannot be switched off without breaking them, and does not need your permission under the law.
Analytics is off until you turn it on. Nothing analytical loads, runs, or is stored before you choose — and choosing "Reject" is a complete answer, not a delay before we ask again on the next page.
Strictly necessary
Always active. These carry no advertising or tracking value and exist only to make the thing you asked for work.
| Name | Where | What it does | Lasts |
|---|---|---|---|
thefinal.consent |
Local storage · both sites | Remembers the analytics choice you made above, so we stop asking. | 12 months |
thefinal.profile.v1 |
Local storage · game | Your display name and age confirmation, so the app knows you finished registering without asking the server on every load. | Until sign-out |
thefinal.returning.v1 |
Local storage · game | Marks you as a returning player, so you get the sign-in screen instead of the sign-up screen. | Until cleared |
| Firebase Authentication token | IndexedDB · game | Keeps you signed in between visits. Removing it signs you out. | Until sign-out |
| Firestore offline cache | IndexedDB · game | Holds your fixtures, cards and Score locally so the game survives a bad connection and does not re-download everything on every screen. | Until sign-out |
_GRECAPTCHA |
Cookie · set by google.com · game | Lets Google reCAPTCHA tell the real app apart from an automated script, so nobody can run up our costs or harvest other players' scores. It is a security check, not a measurement — it does not follow you around the web and it is not covered by the analytics choice above, because turning it off would leave the game undefended. | 6 months |
Analytics Consent required
Set only after you allow it, and removed from future visits when you turn it off. We use them to see which parts of the game people actually use and where it runs slowly — not to build a profile of you, and never for advertising.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes one browser from another so a returning visit is not counted as a new one. | 2 years |
_ga_<id> |
Google Analytics 4 | Keeps the state of the current visit (when it started, whether it is still going). | 2 years |
| Firebase Analytics & Performance storage | Google, in the game only | The same measurement inside the app, plus page-load and network timings. Events are linked to your account identifier while you are signed in. | Up to 2 years |
| Cloudflare Web Analytics (stores nothing) | Cloudflare · both sites | Measures how fast pages actually load for real visitors. It is listed here because it only runs once you allow analytics, but it sets no cookie and writes nothing to your device — it sends one measurement and keeps no identifier, so there is nothing here for you to clear. | — |
Google keeps this data for 14 months and then deletes it. Google's own explanation of the data its analytics products collect is at policies.google.com.
What we don't use
Stated plainly, because "we may use cookies for various purposes" is the sentence every policy uses to avoid saying it:
- No advertising or retargeting cookies. We run no advertising at all.
- No social media pixels or share widgets that phone home.
- No third-party fonts. Our typefaces are served from our own servers, so no font provider ever sees your IP address.
- No cross-site tracking, and nothing is sold or handed to data brokers.
When a page needs something from another company, we tell you here first. Today the only such request is the Google Analytics tag — and only after you allow it.
Controlling it yourself
You are not limited to the buttons above. Every browser can block or clear cookies and site data from its settings, usually under "Privacy". Clearing site data for thefinal.io removes your stored choice, so we will ask again on your next visit.
Be aware that clearing storage for play.thefinal.io also signs you out of the game and drops the offline cache. Your account and everything in it is safe on the server — you just sign in again.
More on how the two currencies, your account and the rest of your data are handled is in the Privacy Policy.