1. About this notice
Cookies are small values stored by a website in your browser. Similar technologies include local storage, session storage, and IndexedDB. Privacy rules can apply to all of these technologies, so this notice uses “browser storage” to refer to them together.
Realm uses essential browser storage to authenticate users, protect the service, reconnect guests, preserve active work, and remember the privacy choice made on a device. Optional preference and analytics storage are disabled until you opt in.
2. Essential storage
Essential storage is required to provide a feature you request, keep the service secure, or remember your privacy choice. It remains available when you reject optional storage.
realm_cookie_consent
Stores the notice version, whether optional preferences and analytics are allowed, the decision time, and whether the choice was made from the banner or settings. It does not contain an account identifier.
- Technology
- First-party cookie
- Duration
- 180 days
realm_locale_session
Delivers a language that you explicitly select for the current browser session. It is set only after that request and is not used to remember the language between visits.
- Technology
- First-party cookie
- Duration
- Current browser session
wos-session, wos-auth-verifier-*, workos-access-token
Authenticate account holders, protect the sign-in redirect, maintain a secure session, and refresh authorization. The main cookie name may differ if Realm configures a custom WorkOS session-cookie name.
- Technology
- First-party authentication cookies provided by WorkOS AuthKit
- Duration
- Up to 400 days for the session, 10 minutes for a verifier, and 30 seconds for a short-lived access-token copy
realm:join-draft:v2:*
Preserves a display name, profile appearance, join code, and join progress while a guest completes the requested multi-page join flow.
- Technology
- Local storage
- Duration
- Up to 24 hours after the last change, until the guest enters the lobby, or until site data is cleared
realm:guest-session:v1:*
Stores the guest participant identifier, reconnect secret, join code, display name, and profile choices so the guest can return to the requested live session.
- Technology
- Local storage
- Duration
- Until the guest leaves, access validation fails, Realm removes the record, or site data is cleared
realm:answer-draft:v1:*, realm:answer-draft:v2:*
Protects in-progress text and choice answers from being lost while a participant completes an active game.
- Technology
- Local storage
- Duration
- Until submission, removal, or until site data is cleared
realm-submission-outbox, realm:submission-outbox-*, realm:submission-cleanup-receipts:*
Queues a submission made while offline or on a poor connection, including typed or selected answers, scanned code values, a captured photo, and the device coordinates used for an optional location check, so it can be sent when the connection returns.
- Technology
- IndexedDB and local storage
- Duration
- Until the queued submission is sent or discarded, or until site data is cleared
realm:signed-session-submission-scope:v1:*, realm:run-submission-scope:v1:*, realm:guest-session-pending-join:v1:*
Keeps a signed-in participant’s or guest’s access to an active run or session on this device and tracks an in-progress join attempt.
- Technology
- Local storage
- Duration
- Until access to the run or session ends, or until site data is cleared
realm:game-creation-draft
Carries the title, description, and selected workspace of a new game between pages of the game creation flow.
- Technology
- Session storage
- Duration
- Until the next page reads it or the browser tab closes
realm.installed-app.launch-entry
Notes that Realm was just opened from your Home Screen so it can send you straight back to a game in progress, once per launch.
- Technology
- Session storage
- Duration
- Current app session
realm.installed-app.install-prompt-dismissed
Remembers, for the current tab, that you declined the Add to Home Screen suggestion. Used when Preferences are not allowed.
- Technology
- Session storage
- Duration
- Current browser session
3. Optional preferences
Optional preferences remember display and interface choices between visits. They are off by default and are used only after you select “Accept all” or enable Preferences in privacy choices.
realm_locale_preference
Remembers an explicitly selected language between browser sessions only while Preferences are allowed.
- Technology
- First-party cookie
- Duration
- No longer than the current 180-day privacy choice, or until Preferences are withdrawn
sidebar_state
Remembers whether an account holder left the application sidebar expanded or collapsed.
- Technology
- First-party cookie
- Duration
- Seven days
realm.builder.previewPassed.*
Remembers that a game author completed the local preview check on this device. Server-side publish readiness does not depend on this value.
- Technology
- Local storage
- Duration
- Until site data is cleared or Preferences are withdrawn
realm.installed-app.install-prompt-dismissed
Remembers between visits that you declined the Add to Home Screen suggestion.
- Technology
- Local storage
- Duration
- Until site data is cleared or Preferences are withdrawn
4. Analytics and session replay
After you enable Analytics and session replay, Realm initializes PostHog to measure product usage, capture browser errors, and record masked interactions for troubleshooting. PostHog does not initialize before consent and stops after you withdraw it. Independently of consent, Realm's servers report their own failures to PostHog as anonymous error reports that carry the route pattern and error details but no cookies, request headers, or person profile.
ph_*, __ph_opt_in_out_*
Stores pseudonymous device, session, consent, feature-flag, and replay state. Realm masks page text, typed values, and element attributes and blocks images, video, and canvas content from recordings. Realm does not use PostHog for advertising.
- Technology
- First-party cookies and local storage used by PostHog
- Duration
- Up to one year, or until Analytics is withdrawn or site data is cleared
5. Third parties and tracking
Authentication
WorkOS provides authentication and session management. Realm sets the AuthKit cookies on its own domain and uses them only for sign-in, security, and session authorization. See the service-provider disclosures in our Privacy Policy.
Maps and requested external features
When a page displays a map, your browser requests styles and tiles from OpenFreeMap. If you switch a map to satellite view, your browser also requests satellite imagery styles and tiles from Esri. Each provider receives ordinary connection information and the requested tile area. Realm does not use those requests for advertising or cross-site tracking.
Library diagnostics
Some core libraries may read browser storage keys used for developer diagnostics. Nuqs may also briefly write and remove a test value to confirm that browser storage is available. These accesses can occur before you make an optional-preferences choice. Realm does not use them to retain user content, remember preferences, run analytics, advertise, or track you across sites.
PostHog analytics
When Analytics is enabled, PostHog receives browser events, technical device and network information, captured exceptions, and masked session-replay data. Realm does not send this data for advertising or cross-site tracking.
6. Your choices
On a first visit, optional preferences and analytics remain off unless you take an affirmative action to allow them. “Accept all,” “Reject all,” and “Customize” are available from the first layer of the banner. Silence, closing a settings dialog, scrolling, or continuing to use Realm does not count as consent.
- Use the Privacy choices button in the footer, on this page, or in your account preferences to review, grant, or withdraw permission.
- Withdrawing Preferences removes identifiable optional preference storage. Withdrawing Analytics stops future PostHog capture and persistence.
- Browser controls can delete or block storage, but blocking essential storage may prevent sign-in, guest reconnection, active drafts, or other requested features from working.
Realm checks both the Global Privacy Control request header and browser signal. Realm does not sell or share personal information for cross-context behavioral advertising, so a detected signal is already honored and its status is shown in privacy choices.
7. Retention and changes
Realm keeps the privacy-choice cookie for 180 days and uses the same period whether optional preferences are accepted or rejected. Realm may ask again after that period, when the cookie is removed, or when purposes, providers, or this notice change materially.
The durations above describe Realm’s intended settings. Browsers may shorten storage lifetimes or remove values earlier. Essential account and service records held on Realm’s servers follow the retention terms in the Privacy Policy rather than this browser-storage schedule.
8. Contact us
Bisaic, Inc. operates Realm. For questions about cookies, browser storage, or privacy choices, email privacy@playonrealm.com.