This Cookie Policy explains which cookies and similar technologies are used on the packplay.app website, what they do and how you can control them. It covers the website only: the PackPlay mobile apps do not use website cookies, and advertising in the apps (Google AdMob) is explained in our Privacy Policy. PackPlay is operated by Alihan Kuru; contact [email protected].
1. What cookies are
A cookie is a small text file that a website stores in your browser and that your browser sends back to the site with later requests. Some cookies last only until you close your browser ("session cookies"); others stay for a set time ("persistent cookies"). Cookies set by the site you are visiting are first-party cookies; cookies set by another domain, for example inside an embedded sign-in window, are third-party cookies. Similar technologies include browser storage such as localStorage, sessionStorage and IndexedDB.
2. Summary
- The website shows no ads and uses no visitor analytics, so it sets no advertising or analytics cookies.
- PackPlay's own cookies are only those needed to sign in, keep you signed in and protect forms. Public pages, such as this one, set no PackPlay cookie while you are signed out.
- If you choose to continue with Google on the sign-in page, Google's sign-in code loads and sets a cookie of its own (section 4). Until you choose, no Google code is loaded.
- The site has no preference cookies and does not remember a language choice; it is in English.
- The site's own code does not use localStorage, sessionStorage or IndexedDB.
3. Cookies set by PackPlay
These cookies are set by packplay.app itself. They are encrypted or random, cannot be read by scripts on the page (HttpOnly) and are sent only over HTTPS.
| Name | Purpose | When it is set | How long it lasts | Why it is needed |
|---|---|---|---|---|
__Host-pp_session |
Keeps you signed in to your account on the website. Holds your sign-in in encrypted form. | When you sign in with Apple or Google on the sign-in page. | Session cookie: your browser removes it when you close the browser, and signing out removes it. The sign-in inside it is accepted only for a limited time set on our server (30 minutes by default), after which you must sign in again even if the cookie is still in your browser. | Strictly necessary: without it you cannot stay signed in to use the account pages you asked for, such as deleting your account. |
__Host-pp_af |
Protects forms against cross-site request forgery (another site submitting a form in your name). | When a page with a form is shown: the sign-in page, the account pages, the deletion status page, and any page while you are signed in (it carries the sign-out button). | Session cookie: removed when you close the browser. | Strictly necessary for security. |
__Secure-pp_signin |
Ties a sign-in attempt to a one-time value so that it cannot be replayed. Sent only to the sign-in page. | When you open the sign-in page. | Up to 10 minutes; deleted as soon as the sign-in attempt is checked. | Strictly necessary for a secure sign-in. |
4. Cookies and storage from third parties
Google sign-in
The sign-in page does not load Google's code when it opens. Only when you choose Continue with Google does it load Google's sign-in code from accounts.google.com, to show Google's own sign-in button. That code sets a cookie of its own on packplay.app:
| Name | Set by | Purpose | When it is set | How long it lasts |
|---|---|---|---|---|
g_state |
Google's sign-in code, on the packplay.app domain | Used by Google for the state of its own sign-in interface. PackPlay does not read or use it. | When Google's code loads after you choose to continue with Google, before you finish signing in. | Persistent; in our checks it was set for about 180 days. |
The Google button is shown in a frame from accounts.google.com, and if you choose Google, sign-in continues in a Google window. Google may set or read cookies on its own domains there, under Google's Privacy Policy; PackPlay cannot read them.
Sign in with Apple
The sign-in page also loads Apple's sign-in code from appleid.cdn-apple.com. In our checks it stored nothing on packplay.app. If you choose Apple, sign-in continues in an Apple window, where Apple may use cookies on its own domains under Apple's Privacy Policy.
Apple's code loads only on the sign-in page, and Google's only after you choose Google there. No other page on the site loads either.
Cloudflare
Cloudflare delivers and protects the website. It adds a small script to our pages that hides e-mail addresses from spam bots; the script sets no cookie. To protect the site, Cloudflare may set its own security cookies, for example when it needs to check that a request comes from a real browser. We did not see such a cookie in our checks, but we cannot rule out that Cloudflare sets one in some situations. See Cloudflare's privacy policy.
Our checks looked at the cookies and browser storage present on the site's pages and on the sign-in page before signing in. Third-party providers can change how their code behaves; we will update this policy when we learn of a change.
5. Consent
PackPlay's own cookies in section 3 are strictly necessary for the sign-in and account functions you ask for and for their security, so we use them without asking for consent. The site has no cookie banner or preference panel, because it uses no optional cookies of its own. Cookies and storage set by Google, Apple or Cloudflare follow those providers' own policies, as described in section 4. Google's g_state cookie is set only after you choose to sign in with Google; it is Google's cookie, PackPlay does not read it, and we do not claim that it is exempt from consent under every law.
6. Managing and deleting cookies
You can see, delete and block cookies in your browser's settings, for each site or for all sites. If you delete or block PackPlay's cookies:
- you will be signed out, and you cannot sign in or use the account pages, such as deleting your account on the website, while they are blocked;
- forms on the site will not work.
If your browser blocks third-party cookies or pop-up windows, signing in with Google or Apple may not work. You can still delete your account in the app under Settings › Account › Delete Account. Public pages such as this one work without any cookie.
7. Changes and contact
We update this policy when the cookies on the site change. The date at the top shows the latest version. Questions: [email protected]. For how we process personal data, see the Privacy Policy and, for users in Türkiye, the KVKK Aydınlatma Metni.