Cookies & storage
Updated 20 September 2026 · website analytics notice 2026-09-19-web1
Wobble Arcade is personally operated by Jasdeep Singh Manku. Our application does not set analytics cookies, but uses browser local storage and session storage as described below. Similar-storage privacy protections still apply. Optional website analytics starts off and needs a separate adult choice; playing and cloud saving do not require it.
Your choices
Choose Keep off to play without optional website analytics. To allow it, first select your age group and then choose Allow website analytics. Nothing is preselected. An under-18 choice keeps analytics off; we retain only a local privacy preference, not a date of birth. This is a self-declaration, not age verification or parental permission. Browser Global Privacy Control and Do Not Track signals also keep website analytics off.
Use Analytics choices in any footer to withdraw and delete this browser’s active analytics. Collection stops in this page immediately and other open tabs receive the change when browser storage is available. Deletion needs a working connection. If it cannot finish, we show a pending status and keep only the capability needed to retry deletion; no new measurements are sent. You can export the browser’s analytics before withdrawal.
What is stored in the browser
| Key / technology | Purpose and choice | Duration |
|---|---|---|
| wobble-website-privacy-v1 · local storage | Remembers your analytics choice and notice version. A refusal or under-18 choice contains no tracking identifier. Only after opting in, this also holds a random 256-bit browser capability used to count return visits and control your own analytics. Never share it. | Choice and capability expire after 90 days; the code removes/replaces expired records when you return. You can turn it off earlier. Local storage has no browser-enforced automatic expiry. |
| wobble-website-visit-v1 · session storage | Only after opting in: random visit ID, consent capability, broad source category and latest activity time. Connects measured page views in this tab, without linking your Google account. | A new visit after 30 minutes without visible activity; normally removed when the tab closes. Browser restoration can preserve session storage. Withdrawal removes it. |
| wobble-cloud-session-v1 and temporary sign-in verifier · session storage | Only for requested Google sign-in: authenticates the optional cloud account. This is not a game save or an analytics identifier. | Sign out to clear the tab session. Closing normally clears it, though browser restoration may preserve it. Provider token expiry also applies. |
| Game scores and sound/music/motion choices · page memory | Runs the game during the current page visit. No device-saving option. | Reset on refresh or close. No persistent game-storage entry is created. |
Wobble Haul storage
Guest Haul progress and all Haul sound/motion settings stay in page memory only. Adults can separately enable account saving for Haul; its records are stored in Supabase, using the same necessary Google sign-in session described above. The game loader does not enable persistent game paths or an offline service worker. The browser may cache downloaded game files normally; those files contain the game, not your saved progress. The Haul play page has no optional analytics collector. You can manage the rest of the website’s analytics choices here.
What analytics sends
With permission: a random visitor capability, random page/visit IDs, a fixed page name, visible-time totals, selected Play/Cloud saves/Guide clicks, counts of game starts, putts, completed holes and rounds, script-error counts, and whether classic rendering is used. We also send broad screen-size, browser-family, page-load-speed and traffic-source categories. Full URLs, queries, referral URLs, error messages, form values, names and email addresses are not sent by this collector. It does not record your screen, mouse paths or keystroke contents.
The server stores a hash of the capability rather than the raw value. This still permits browser-level distinction and is treated as pseudonymous personal data, not anonymous data. It is not linked to Google accounts. Statistics reflect consenting browsers, not every visitor or a verified count of people.
Retention and providers
Supabase processes website analytics for the operator. Page records are kept within a 90-day window, with daily cleanup. The consent record expires 90 days after registration. Withdrawal deletes active page records and retains a minimal revoked capability hash until its original expiry so delayed requests cannot restart collection. Provider security logs and backups have separate schedules; deletion is not a promise of immediate removal from every retained provider copy.
Website hosting and delivery infrastructure still process connection/security information, including IP address and request/browser details, whether or not analytics is allowed. Google’s sign-in pages and hosting/security providers may use their own cookies or storage under their policies. We do not control every provider-side entry or promise an exhaustive provider-cookie inventory. We do not use advertising pixels, session replay, cross-site profiling or analytics consent as a condition of play.
Shared devices and other controls
Before a child or another person plays on a previously consenting browser, choose Turn off & delete analytics. A stored adult choice is not permission to measure a child’s activity. Adults should use a separate browser profile on shared devices. Clearing storage or using another browser creates a different browser identity; it can also remove the capability needed for immediate access/deletion of older records. Use the controls here first where possible. Otherwise older records expire through scheduled cleanup.
Website analytics and optional account gameplay analytics are separate. Manage the latter in Cloud saves. Deleting a Google-linked account does not automatically identify or delete unlinked browser analytics on your other browsers; use their Analytics choices controls too.
Contact and requests
Email jasdeep@gprm.in or write to Jasdeep Singh Manku, House No. 6/22, Street No. 5, Tatibandh, Raipur, Chhattisgarh 492001, India. Do not send passwords, authentication tokens or browser capability values by email. See the privacy notice for processing purposes, providers, transfers and rights.