Review version: 2026-10-18 · Effective date not set
1. Cookies
`__Host-tacteos_session` (`tacteos_session` in local development) maintains sign-in for at most seven days; logout also revokes the server session. `__Host-tacteos_oauth` (`tacteos_oauth` locally) binds a browser to an enabled social sign-in for at most ten minutes and is cleared on callback. `__Host-tacteos_apple_callback` is used only if the Apple callback is enabled and lasts at most 60 seconds. `tacteos_interface_locale` remembers the interface language for at most 365 days.
2. Local storage
`tacteos-cookie-consent-v2` stores your cookie choices (functional, analytics, advertising) and when you made them; you can change them at any time in Cookie preferences. `tacteos-tt-recent` holds up to six recent player-profile paths without an application expiry. Legacy `tacteos-tt-favorite:` entries are removed after a successful account import. Legacy `tacteos-cookie-consent` and `tacteos-cookie-notice-v1` entries from before 14 October 2026 are not treated as consent.
3. Controls and other services
You can delete cookies and site data in your browser. This does not itself remove server-side sessions or account records; sign out to revoke a session. An enabled external sign-in provider explains cookies on its own domain in its policy.
Advertising: free use of Tacteos is supported by Google AdSense ads. If you allow advertising cookies, Google may show ads based on your interests (for example `__gads`, `__gpi`, `IDE`); if you do not, you may still see non-personalized ads. In the European Economic Area, the UK and Switzerland, advertising consent is also collected through Google's certified consent form. Google's advertising and privacy pages explain how Google uses data.
Analytics: if you allow it, pseudonymous, aggregated statistics about how pages are used may be collected; they are never sold or used for advertising. The analytics service will be named in this section when it is enabled.