Cookie Policy
An exact list of the cookies this site sets today — and an honest note about the ones it does not.
Last updated: 27 July 2026
Cookies we set
These are all first-party cookies, set by this site rather than by an outside company.
| Cookie | Category | Purpose | Details |
|---|---|---|---|
sb-*-auth-token | Strictly necessary | Your Supabase Auth session — this is what keeps you signed in. | Sent only on same-site navigation, and readable by scripts on this site (the browser client reads it directly). May be split across numbered parts when large. The cookie itself is stored for up to 400 days; the access token inside it lasts one hour and is renewed with a rotating refresh token, so you stay signed in across the hour boundary. |
sidebar-collapsed | Functional | Remembers whether you collapsed the desktop sidebar. | Lasts one year. Contains only a collapsed/expanded flag. |
view-as | Functional | Lets an administrator preview the site as another role or tier while debugging. | Not readable by scripts; lasts 8 hours. Only ever set for administrator accounts — ordinary users never receive it. |
We do not use browser local storage or session storage.
Analytics
Vercel Web Analytics and Speed Insights set no cookies. They collect aggregate page-view and page-performance data without identifying you or tracking you across other sites.
Google Analytics 4 is integrated but not currently switched on, so it sets no cookies today. It can only run on the live production site once a measurement ID is configured, and never on preview or development deployments. When it is switched on it will set analytics cookies (typically _ga and _ga_*); this page and the Privacy Policy will be updated first.
Advertising
No advertising cookies are set today. No ad network script is loaded — the reserved ad placements in the layout render nothing.
If we enable Google AdSense for free-tier accounts, Google may set cookies such as __gads, __gpi, and DoubleClick's IDE to serve, cap, and measure ads. Google explains this at How Google uses information from sites that use our services, and you can adjust personalisation at Google Ad Settings.
Third-party images
Game item icons and news thumbnails are loaded from external hosts. These are images, not scripts, and set no cookies on this site — but the host serving them does see your IP address, as it would for any image on the web.
Controlling cookies
You can clear or block cookies in your browser settings. Note that blocking the strictly-necessary session cookie makes signing in impossible — the site cannot keep you logged in without it. The functional cookies can be blocked safely: you will lose the remembered sidebar state, and — if you are an administrator — the role/tier preview, which relies on the view-as cookie. Nothing else is affected.
A cookie consent banner is not yet present, because no analytics or advertising cookies are currently set. One will be added before any non-essential cookie is introduced.
Questions
Email support@poeoverlord.com, or read the full Privacy Policy.