Cookies & browser storage

Last updated: October 23, 2026

Deck Roost uses cookies to provide sign-in and security, and browser storage to support the features you use. This notice explains those uses and your controls. It is available without signing in.

About this project

Deck Roost is a personal project. We do not run advertisements or sell personal data. We use service providers to host, deliver, and secure the site and support account features. This notice does not limit rights you have under applicable privacy laws.

Sign-in and security cookies

These first-party cookies support the account services you request. They are not advertising cookies.

__Host-deck_roost_session — sign-in

Keeps you signed in using an opaque session identifier. Maximum browser lifetime: eight hours. The server may end a session earlier after inactivity, sign-out, or revocation.

__Host-deck_roost_csrf — account protection

Protects signed-in actions against forged requests. Maximum browser lifetime: eight hours.

__Host-deck_roost_access_request — account requests

Lets you resume an account request and check its status. Maximum browser lifetime: 30 days, refreshed when the request-status service renews it.

These cookies use secure HTTPS connections and are restricted to this site. Blocking them may prevent sign-in, account requests, or changes to your decks.

Browser storage and offline features

Preferences and saved views

Local storage remembers choices such as appearance, game palette, grid size, deck order, and saved searches. These remain until you change them or clear the site's browser data; they do not have an automatic expiry.

Cached decks, offline drafts, and scanner files

Browser databases and caches support cached deck views, unsynced drafts, and locally hosted scanner files. Static application files may also be cached for offline use. Browser cleanup, storage limits, and application updates may remove cached data.

Temporary tab state

Session storage supports navigation, account setup, and temporary account feedback. It normally lasts for the current browser tab.

Prepared account exports

Preparing an account export may create temporary files in this browser's private filesystem. The export controls let you remove a prepared export. Files you download to a folder or another device remain there until you remove them separately.

Optional PDF player details

Player name, date of birth, age division, and Player ID are remembered in this browser only when you explicitly choose the PDF form's remember option. Use its clear control to remove remembered details. When you request a PDF, submitted fields are processed by the site to generate the file; hosted PDF rendering uses Cloudflare. These fields are not saved to your Deck Roost account by the PDF export.

Notice acknowledgement

The local-storage entry deck-roost-cookie-notice remembers the version of this notice you dismissed. It contains no unique visitor identifier and grants no tracking permission. It remains until the notice changes or you clear site data.

Advertising, analytics, and Cloudflare

We do not use advertising cookies. Our site security policy blocks optional analytics scripts, including Cloudflare's automatically inserted performance beacon. Dismissing the notice does not enable those scripts.

Cloudflare hosts and protects Deck Roost. Security and delivery services process network requests, and protected areas may use Cloudflare security or access cookies. Account signup uses Cloudflare Turnstile to check for abuse. Turnstile processes network and browser signals, including IP address; Cloudflare also uses those signals to improve bot detection. These security services are separate from optional analytics. See Cloudflare's privacy policy, Turnstile privacy information, and Cloudflare's cookie information.

Card artwork can load from external image providers, which receive the network information needed to deliver those images.

Your controls

You can change appearance and saved-view preferences in the app. The PDF form has its own remember and clear controls. You can block or delete cookies, local storage, browser databases, and cached files in your browser's site-data settings for Deck Roost.

Save or export your work before clearing browser data: clearing it can sign you out and remove unsynced drafts, saved views, and remembered PDF details. It does not delete decks already saved to your account.

The Cookies & browser storage link and Show cookie notice button remain in the site footer so you can review this information at any time.