Cookie Policy

GAMESLIKE is configured as a no-banner first version. The site does not load non-essential client analytics or affiliate tracking before consent.

No Google Analytics, Ahrefs Web Analytics, Simple Analytics, advertising tag, affiliate pixel, or affiliate attribution cookie is intentionally loaded on first page view.

The site may use strictly necessary cookies or storage for authentication, Steam sign-in state, security, account consent records, and protection against broken script reload loops.

`gameslike_steam_openid_state` keeps the Steam sign-in request tied to the browser that started it. It is HttpOnly, same-site, and expires after 10 minutes.

`gameslike_steam_signup_consent` and `gameslike_google_signup_consent` temporarily preserve Terms and Privacy acceptance while the user is redirected to Steam or Google. They are HttpOnly, same-site, and expire after 10 minutes.

Supabase Auth may set strictly necessary session cookies after sign-in so the account stays signed in. Their lifetime follows the configured Supabase session settings.

Cloudflare may set `cf_clearance` when JavaScript detections or security challenges are enabled at the edge. This cookie supports bot and security checks; Cloudflare controls the exact lifetime and attributes.

The `gameslike-chunk-reload` sessionStorage key is only written after a failed Next.js chunk script load and prevents repeated reload loops.

Ahrefs Web Analytics and Simple Analytics are not loaded by the application in this version. Affiliate, advertising, retargeting, personalization, and cross-site tracking are not enabled by the application before consent.

Production edge settings must also keep Cloudflare Web Analytics, Rocket Loader, and similar optional injection features disabled or consent-gated before the first page view.

If GAMESLIKE adds optional analytics or affiliate attribution later, the site must add a consent flow with clear reject, accept, and withdrawal choices before those tools run.