NANQUIM: Cookie Policy

Version: 1.0
Effective from: October 13, 2026
Last updated: October 13, 2026

This document is available in English and Portuguese. The English version is the original and prevails in case of any discrepancy, except where the law of the user's country of residence requires the version in the user's language to prevail. For consumers residing in Brazil, the Portuguese version prevails.

1. Summary

This Policy explains which cookies and similar technologies the official website (nanquim.gg) and the browser game (play.nanquim.gg) use, why, for how long and how you control each of them. It supplements the Privacy Policy (https://nanquim.gg/en/privacy/).

We only use strictly necessary cookies and, if you allow it, preference cookies that remember the language you chose and enable anonymous measurement of how the game interface is used (section 4.2).
We do not use third-party analytics or tracking, advertising, tracking pixels, behavioral profiling or social media cookies. None of our cookies is used to follow you across other websites.
On your first visit, the site shows a notice with three buttons of the same size and emphasis: "Accept all", "Reject optional" and "Customize". Before you choose, no preference cookie is stored.
You can change your choice at any time through the "Cookie preferences" link in the footer of every page.
We honor the Global Privacy Control (GPC) signal as a refusal of optional cookies.

2. Who is responsible

The website and the game are operated by ALAS TECHNOLOGY LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. For any question about cookies and privacy, write to privacy@nanquim.gg.

3. What cookies and similar technologies are

Cookies are small text files that a website stores in your browser and that the browser sends back to the same website on later visits. They are used, for example, to keep you signed in or to remember a choice.

First-party cookies are set by the domain you are visiting (here, nanquim.gg and its subdomains). Third-party cookies are set by a different domain.
Session cookies disappear when you close the browser or after a period of inactivity. Persistent cookies remain until their expiry date or until you delete them.

Similar technologies store information on your device in other ways. We use the browser's local storage (localStorage), which works like a cookie that never travels to the server: it stays only on your device until it is deleted. In this Policy, "cookies" includes these technologies.

4. Categories we use

4.1. Strictly necessary

Without them, the website or the game would not work or would be insecure: sign-in, protection against bots and abuse, connection security and the record of your own cookie choice. They are always on because they serve a service you asked for, so the law does not require consent for them. You can still block them in your browser (section 9), but parts of the service may stop working.

4.2. Preference

They remember a choice of yours so we do not ask again. Their main use is the language. They are stored only with your consent, which you can withdraw at any time.

Anonymous measurement of game interface usage. Preference consent also enables, in the game at play.nanquim.gg, anonymous measurement of how the interface is used (heatmap), so we can understand where people look for controls and improve the interface. It works under the following conditions:

only a share of sessions takes part, and those sessions send our servers the approximate position of regular clicks on the interface, without the text you type, without the sequence of your clicks and without any link to your account;
the data is stored only as totals, for up to 7 days;
the measurement does not store any new cookie or storage on your device: it only checks the choice already recorded in nanquim_consent;
you can withdraw consent at any time (section 8), and clicks not yet sent are discarded;
the Global Privacy Control signal counts as a refusal (section 10);
the measurement does not run inside the Discord Activity, when the game is embedded in third-party sites or in the desktop app.

Technical error diagnostics in the game do not depend on cookies or on this choice and are covered in the Privacy Policy (https://nanquim.gg/en/privacy/).

4.3. What we do not use

We do not use third-party analytics or tracking: no cookies or technologies for analytics or audience measurement provided by third parties, for advertising or remarketing, social media pixels, tracking share buttons or device identification techniques (fingerprinting). If we ever want to use any of these categories, we will update this Policy and ask for your consent first. The only usage measurement we carry out is our own anonymous measurement described in section 4.2, which depends on your preference consent.

5. Website cookies and storage (nanquim.gg)

Name	Domain	Purpose	Category	Duration	Set by
`nanquim_consent`	nanquim.gg and subdomains	Stores your cookie choice, with a version (for example, `v1.prefs-1` when preferences are on and `v1.prefs-0` when they are off), so the website and the game respect it	Strictly necessary	12 months	Us (first party)
`nanquim_lang`	nanquim.gg and subdomains	Remembers the language you chose. The site root uses it to open directly in your language, and the game reads the same cookie. SameSite=Lax and Secure	Preference (consent only)	1 year	Us (first party)
`nanquim.lang` (localStorage)	nanquim.gg	Local copy of the chosen language, used by the language selection page	Preference (consent only)	Until you delete it or withdraw consent	Us (first party)
`__cf_bm`	nanquim.gg	Cloudflare bot management: helps tell people apart from automated traffic. It does not identify you or follow you across sites	Strictly necessary	30 minutes of inactivity	Cloudflare, our network provider, on our domain
`cf_clearance`	nanquim.gg	Proof that the browser passed a Cloudflare security check, so the check is not repeated	Strictly necessary	Set by the check configuration	Cloudflare, on our domain
`_cfuvid`	nanquim.gg	Cloudflare rate limiting: tells apart different visitors who share the same IP address	Strictly necessary	Session	Cloudflare, on our domain

Cloudflare cookies only appear when the corresponding protection is active or triggered, so not every visitor receives them. Cloudflare acts as our processor and describes these cookies at https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/.

Without preference consent, the website does not store nanquim_lang or nanquim.lang. In that case, the site root picks the language only from the language your browser reports on each visit (the Accept-Language header), without storing anything.

6. Game cookies and storage (play.nanquim.gg)

Name	Domain	Purpose	Category	Duration	Set by
`__Host-nq_sid`	play.nanquim.gg	Keeps your sign-in session. HttpOnly (not readable by scripts), Secure and SameSite=Lax	Strictly necessary	Expires after 14 days of inactivity	Us (first party)
`__Host-nq_bind`	play.nanquim.gg	Binds the start and the return of a provider sign-in (OAuth) and of the magic link sent by email to the same browser, which prevents someone else from completing the sign-in in your place	Strictly necessary	Up to 1 hour, only during the sign-in flow	Us (first party)
`__Host-nq_gate`	play.nanquim.gg	Edge pass: confirms that the browser passed the access check before reaching the game servers	Strictly necessary	30 minutes	Us (first party)
`nanquim_lang`	nanquim.gg and subdomains	The same language cookie as the website (section 5)	Preference (consent only)	1 year	Us (first party)
`nanquim_consent`	nanquim.gg and subdomains	The same cookie choice as the website (section 5)	Strictly necessary	12 months	Us (first party)
Settings (localStorage)	play.nanquim.gg	Stores the settings you adjust in the game	Strictly necessary (feature you request)	Until you delete it	Us (first party)
Voice preferences (localStorage)	play.nanquim.gg	Stores your voice preferences in the game	Strictly necessary (feature you request)	Until you delete it	Us (first party)
Campaign cache (localStorage)	play.nanquim.gg	Keeps campaign data on the device so it loads faster	Strictly necessary	Until you delete it or the game refreshes the cache	Us (first party)
Cloudflare Turnstile	challenges.cloudflare.com	Check on the sign-in screen that confirms a person is there, without image puzzles	Strictly necessary	Set by Cloudflare	Third party (Cloudflare)

The sign-in providers Google, Discord and Apple only come into play if you choose to sign in with one of them. In that case, you are taken to the provider's website, which sets its own cookies on its own domains (for example, accounts.google.com, discord.com and appleid.apple.com), under its own policies:

Google: https://policies.google.com/privacy
Discord: https://discord.com/privacy
Apple: https://www.apple.com/legal/privacy/

With preference consent, the game may also carry out the anonymous interface usage measurement described in section 4.2, without storing any cookie or storage beyond those listed above.

We do not control these third-party cookies. Cloudflare's policy, which covers Turnstile, is at https://www.cloudflare.com/privacypolicy/.

7. Legal bases

Brazil (LGPD). Strictly necessary cookies: performance of a contract and of preliminary steps at the data subject's request (art. 7, V) and legitimate interest in the security of the service and fraud prevention (art. 7, IX). Preference cookies: consent (art. 7, I), freely given, informed and revocable at any time (art. 8, § 5).

European Union, European Economic Area and United Kingdom (GDPR, UK GDPR, ePrivacy Directive and PECR). Storing or reading information on your device requires consent, unless it is strictly necessary to provide a service you explicitly requested (art. 5(3) of Directive 2002/58/EC and regulation 6 of PECR in the United Kingdom). That is why necessary cookies do not ask for consent and preference cookies do. The related processing of personal data relies on contract (GDPR art. 6(1)(b)), legitimate interest in security (art. 6(1)(f)) and, for preferences, consent (art. 6(1)(a)). Refusing is as easy as accepting, and withdrawing consent is as easy as giving it.

California and other US states (CCPA/CPRA and similar laws). We do not sell personal information or share it for cross-context behavioral advertising, and none of our cookies has that purpose. Even so, we treat the Global Privacy Control signal as an opt-out request, as described in section 10.

8. How to make and change your choice

First visit. The cookie notice appears at the bottom of the screen with three buttons of equal weight: "Accept all" turns preferences on; "Reject optional" keeps only the necessary ones; "Customize" shows the categories, with necessary cookies always on and a switch for preferences. Until you choose, nothing related to preferences is stored.
Changing later. Use the "Cookie preferences" link in the footer of any page of the website. It reopens the same panel. Without JavaScript, the link brings you to this Policy.
Withdrawing consent. When you reject or turn off preferences, we immediately delete nanquim_lang and nanquim.lang from your browser, and the anonymous measurement of game interface usage stops, with clicks not yet sent discarded. Withdrawal does not affect what was done before it.
Validity. Your choice lasts 12 months. After that, or if this Policy changes in a way that requires new consent, the notice appears again.
Game. The game at play.nanquim.gg uses the same choice, stored in the nanquim_consent cookie, valid for nanquim.gg and its subdomains.

9. How to delete or block cookies in your browser

You can view, delete and block cookies and local storage in your browser settings. Official guides:

Deleting site data also removes your choice, and the notice appears again. Blocking strictly necessary cookies may prevent sign-in and other parts of the game.

10. Do Not Track and Global Privacy Control

Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a refusal of optional cookies: the notice does not appear, preferences stay off (including the anonymous measurement of game interface usage) and the panel states that the signal was received. If you later explicitly turn preferences on in the panel, that choice applies. For residents of California and other states with similar rules, GPC also counts as a request to opt out of the sale or sharing of personal information, which we do not do in any case.

Do Not Track (DNT). There is no industry standard on how to respond to DNT. Since we do not track you across websites or over time for advertising, the website and the game behave the same with or without this signal.

11. Changes to this Policy

We may update this Policy when we change cookies, providers or the applicable law. The "Last updated" date at the top always changes. If a change creates a new optional category or changes the purpose of an existing one, we increase the version of the choice stored in nanquim_consent and ask for your consent again before using it.

12. Contact

Questions, requests and complaints about cookies: privacy@nanquim.gg.

ALAS TECHNOLOGY LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.

Your rights over personal data, such as access, correction, deletion and complaints to a data protection authority, are described in the Privacy Policy (https://nanquim.gg/en/privacy/).