Cookie Policy
Version and last updated: 2026-09-18
These choices cover cookies, local storage and similar access to your device. Optional purposes are off until you choose them. Reject all and Accept all are available at the same level, and you may choose each optional purpose separately.
1. Necessary storage
The lfd_session cookie maintains authentication. It is HttpOnly, SameSite=Lax and Secure in production; its default lifetime is 12 hours, renewed through session activity as configured by the service. The local markers lfd_session_present and lfd_userId identify the current session in the interface until logout or browser-data removal. Legacy lfd_token data may be read for migration to cookie authentication and is cleared on logout.
The riftessence_cookie_consent record stores your choices, policy version and timestamps for 180 days, whether you accept or refuse. It is necessary to remember your choice. Security and anti-bot services, including Cloudflare Turnstile on authentication forms, may process technical information needed to protect access.
The theme, language and cursor preferences you request, draft forms, game progress, acknowledgement of interface notices and navigation state support those specific functions. They are not used for advertising or audience measurement. Local preferences and drafts remain until overwritten or cleared; session storage lasts for the browser session. Browser settings can remove or block this storage, which may prevent the corresponding function from working.
2. Optional audience measurement
Vercel Web Analytics measures visits, viewed pages and technical usage information. It is disabled before consent, even where the provider describes its product as cookieless. Declining prevents the analytics script from loading. Withdrawing consent stops further collection and reloads the page to remove the active analytics runtime. Routine new-visitor notifications to Discord, and their visitor_tracked marker, have been retired.
3. Optional ad measurement
Allowing this purpose loads advertisers’ externally hosted images and enables first-party impression and click measurement. Records contain the ad, placement, time, hashed IP address and account identifier if signed in. A hashed address is used to exclude repeat impressions from the same connection within one hour. Only eligible, consented views count against a campaign’s purchased budget.
Without this choice, the site can still show an ad’s title and destination link, but does not load its external image or send impression/click measurements. Clicking a destination opens a separate website governed by its own choices. RiftEssence does not use cross-site behavioural advertising trackers.
4. Optional external media
YouTube embeds and remotely hosted profile audio/backgrounds can contact other providers, disclose your IP address and allow those providers to access device information. They remain blocked until you allow external media. YouTube uses its privacy-enhanced embed domain, which does not replace consent. Media uploaded to RiftEssence and service assets needed to display the app are distinct from these third-party players.
5. Change or withdraw your choices
Use Cookie settings in the footer or the button below at any time. Necessary purposes cannot be turned off in this panel; the optional switches are off by default. Closing a page, scrolling, registering and accepting the terms do not grant cookie consent.
Choices apply to this browser and device for 180 days, then we ask again. Changes to the purposes may also require a new choice. Withdrawal disables the relevant integrations; the page reloads where necessary to stop already loaded services. A provider’s previously stored third-party cookies may also need to be removed through your browser settings. If storage is blocked, optional services remain off.
Operator contact
Thomas BARTHOIS · RiftEssence