Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They help websites remember your preferences, improve functionality, and understand how you use the site.

Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain until they expire or you delete them).

2. Why We Use Cookies

One Roll Studios uses cookies to:

• Provide essential functionality: Authentication, session management, security
• Improve user experience: Remember your preferences, language, settings
• Analyze usage: Understand how visitors interact with our site (via Google Analytics)
• Process payments: Secure transactions via LemonSqueezy
• Ensure compliance: Store your cookie consent preferences

3. Types of Cookies We Use

3.1 Essential Cookies (Always Active)

These cookies are necessary for the website to function and cannot be disabled. They enable core features like authentication, security, and consent management.

Examples:

• Session cookies (authentication, login state)
• Security cookies (CSRF protection, fraud detection)
• Cookie consent preferences (stores your accept/reject choice)

Legal Basis: Legitimate interest (site functionality)

3.2 Analytics Cookies (Optional)

These cookies help us understand how visitors use our website, including which pages are most popular, how long users stay, and where traffic comes from. This data is used to improve our site.

Examples:

• Google Analytics (GA4): Tracks page views, session duration, bounce rate, user demographics (anonymized)

Legal Basis: Consent (you can opt-out via our cookie banner)

3.3 Marketing Cookies (Not Currently Used)

We do NOT currently use marketing or advertising cookies (e.g., Facebook Pixel, Google Ads remarketing). If we introduce them in the future, we will update this policy and request your explicit consent.

3.4 Third-Party Cookies

Some cookies are set by third-party services we use:

• LemonSqueezy: Payment processing (secure checkout, fraud prevention)
• Supabase: Database and authentication (session management)
• Google Analytics: Website analytics (if you consent)

These third parties have their own privacy policies. We recommend reviewing them:

• LemonSqueezy Privacy Policy
• Supabase Privacy Policy
• Google Privacy Policy

4. Cookie Consent & Management

4.1 Cookie Banner

When you first visit our website, you'll see a cookie consent banner. You have two options:

• Accept All: Allows all cookies (essential + analytics)
• Reject: Only essential cookies will be used (analytics disabled)

Your choice is stored in a cookie (cookie-consent) for 1 year. You can change your preference at any time (see below).

4.2 How to Change Your Cookie Preferences

Option 1: Clear Browser Cookies

Delete all cookies in your browser settings. The cookie banner will reappear on your next visit, allowing you to choose again.

Option 2: Browser Settings

You can disable cookies entirely in your browser:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Preferences → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Block all cookies
• Edge: Settings → Privacy, search, and services → Cookies

Note: Disabling all cookies may affect website functionality (e.g., you may not be able to log in or use certain features).

Option 3: Opt-Out of Google Analytics

To opt-out of Google Analytics tracking across all websites, install the Google Analytics Opt-Out Browser Add-On.

5. Cookie List

Below is a list of cookies used on our website (as of November 8, 2025):

Note: This list may change as we add or remove features. We'll update this policy accordingly.

6. Data Privacy & Security

Cookies do not contain personal information like your name or email (except in encrypted authentication cookies). They typically store:

• Anonymous identifiers: Random strings that don't identify you personally
• Preferences: Language, theme, consent choices
• Session data: Login state, shopping cart (if applicable)

Google Analytics: We use IP anonymization in GA4, meaning your full IP address is never stored. Google cannot identify you personally from analytics data.

For more details on how we handle your data, see our Privacy Policy.

7. International Compliance

7.1 GDPR (EU/EEA)

If you're in the European Union or European Economic Area, we comply with the General Data Protection Regulation (GDPR):

• Consent: Non-essential cookies (analytics) require your explicit consent
• Right to Withdraw: You can change your cookie preferences anytime
• Data Subject Rights: Access, delete, or port your data (see Privacy Policy)

7.2 Other Jurisdictions

We comply with cookie laws in all regions, including:

• UK: UK GDPR and PECR (Privacy and Electronic Communications Regulations)
• California: CCPA (California Consumer Privacy Act)
• India: Digital Personal Data Protection Act (DPDP Act, 2023)

8. Do Not Track (DNT)

Some browsers have a "Do Not Track" (DNT) setting. We respect DNT signals:

• If your browser sends a DNT signal, we will not use analytics cookies (even if you previously accepted)
• Essential cookies will still be used (required for site functionality)

How to Enable DNT: Check your browser settings under Privacy or Security options.

9. Changes to This Cookie Policy

We may update this Cookie Policy to reflect changes in our use of cookies, technology, or legal requirements.

Notification: Significant changes will be announced via email (if you've provided one) or a notice on our website.

Last Updated: Check the date at the top of this page.

10. Contact Us

For questions about cookies, privacy, or to exercise your data rights, contact us: