Cookies and Local Storage
Apex City sets no advertising or analytics cookies of its own, which is why you are not asked to accept any. What the game does keep on your device, and what third parties set when you deliberately use them, is listed below.
1. What we store on your device
| Name | Where | What it is for | How long |
|---|---|---|---|
apexcity.session | Local storage | Your session token and public account fields, so you stay signed in | Until you sign out or delete your account (token expires after 30 days) |
apexcity.settings | Local storage | Language, audio, quality and accessibility preferences | Until you clear site data |
| Service-worker caches | Cache storage | Offline shell, models and textures, so the game starts fast | Until a new version replaces them |
| WebGL / model caches | IndexedDB | Decoded geometry, so the city does not re-download on every visit | Until you clear site data |
These are strictly necessary for the game to work and are not used to track you across other websites. They stay on your device: nothing in this table is sent anywhere except the session token, which authenticates your own API calls.
2. Cookies set by others
We load a third party's code only when you choose an action that needs it, and only then can it set a cookie on its own domain:
| When | Who | Why |
|---|---|---|
| You press "Sign in with Google" | Google (accounts.google.com) | Google's own sign-in session and abuse prevention |
| You press "Continue with Facebook" | Meta (facebook.com, connect.facebook.net) | Facebook Login session; see Meta's cookie policy |
| You start a web checkout | Stripe (js.stripe.com, stripe.com) | Fraud prevention and completing the payment |
| Any page load | Cloudflare | Bot and DDoS protection for our domains |
| You watch a rewarded ad in the app | Google AdMob | Serving, capping and measuring the ad (non-personalised by default) |
If you never use those buttons, none of those cookies are set.
3. Turning things off
- Clearing site data in your browser removes everything in section 1; you will be signed out and the game will re-download its assets.
- Blocking third-party cookies disables the Google and Facebook sign-in buttons but leaves email and guest sign-in working.
- Rewarded ads are optional, and personalised ads are off unless you switch them on in Settings → Privacy.
- On Android and iOS, the operating system's advertising-identifier controls apply to AdMob.
4. Do Not Track
We do not track you across sites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We honour a GPC signal as a "do not sell or share" request anyway.