Cookie and Analytics Notice
Cookie and Analytics Notice
This notice lists everything Augurhall stores in your browser, why, and for how long. It is part of our Privacy Policy. The landing page at augurhall.com stores nothing in your browser.
1. In short
- The app uses three cookies, all needed to sign you in. They are set only by our own server, cannot be read by scripts on the page, are sent only over HTTPS, and are never used for tracking or advertising.
- The app keeps your work and your display settings in your own browser's storage, so they are there when you come back. This data stays in your browser; the app sends it to our server only when you use it in a check (for example a party or an imported sheet).
- Analytics run only after you say yes, and only when analytics is configured for the site. You can change your mind at any time from the account page or the footer.
Cookies and storage that are strictly necessary for a service you asked for do not need your consent under EU law. Everything below except the analytics entries is of that kind.
2. Cookies
| Name | Purpose | Lifetime | Consent |
|---|---|---|---|
__Host-sf_session | Keeps you signed in. Holds a random token; our server stores only its hash | 30 days from sign-in, or until you sign out | Not needed (essential) |
__Host-sf_email_bind | Ties a sign-in link to the browser that asked for it, so a link opened elsewhere cannot sign anyone in | 15 minutes, or until the link is used | Not needed (essential) |
__Host-sf_access | Marks this browser as admitted to early access after a correct access password; holds a signed time, never the password | 180 days | Not needed (essential) |
__Host-sf_patreon_state | Ties a Patreon sign-in to the browser that started it, to protect against forged sign-ins | 10 minutes, or until the sign-in finishes | Not needed (essential) |
3. Storage in your browser
These entries are in your browser's local storage (localStorage) or its database (IndexedDB). The app does not send them anywhere unless the table says so. A * stands for a part of the name that varies.
| Name | Kind | Purpose | Lifetime | Consent |
|---|---|---|---|---|
simfinder.analytics-consent | Local storage | Your analytics choice (yes or no), written only when you press a button, so we do not ask again | Until you clear site data | Not needed (essential) |
simfinder.analytics-device | Local storage | A random identifier for this browser, sent with analytics events; written only after you say yes | Until you withdraw consent (deleted at once) or clear site data | Only with your consent |
simfinder:theme | Local storage | Light or dark theme, if you chose one | Until you choose "system" or clear site data | Not needed (essential) |
simfinder.ui | Local storage | Which design of the app you chose | Until you clear site data | Not needed (essential) |
simfinder.replay.board | Local storage | Display settings of the replay board | Until you clear site data | Not needed (essential) |
simfinder.augur.play.prefs | Local storage | Your play-screen settings, such as advice and the camera | Until you clear site data | Not needed (essential) |
simfinder.play.follow | Local storage | Whether the camera follows the acting creature | Until you clear site data | Not needed (essential) |
simfinder.play.enemy-speed | Local storage | How fast the other side's turns play | Until you clear site data | Not needed (essential) |
simfinder.play.rollReveal | Local storage | How dice rolls are revealed | Until you clear site data | Not needed (essential) |
simfinder.play.logPane | Local storage | The height of the fight log | Until you clear site data | Not needed (essential) |
simfinder.play.sound | Local storage | Sound on or off, and volume | Until you clear site data | Not needed (essential) |
simfinder.book.all | Local storage | Whether the action list shows every action | Until you clear site data | Not needed (essential) |
simfinder.play-saves | Local storage | Fights you saved part-way in this browser | Until you delete the save or clear site data | Not needed (essential) |
simfinder.played-fights | Local storage | Fights you played to the end in this browser, so you can replay them | Until you clear site data (only the newest are kept) | Not needed (essential) |
simfinder.uploads.v1 | Local storage | Which of your imported characters on our server matches which sheet in this browser, so a sheet is not uploaded twice | Until you clear site data | Not needed (essential) |
simfinder.solo-run | Local storage | Which solo module run is open, so a reload returns to it | Until the run ends or you clear site data | Not needed (essential) |
simfinder.play-session.* | Local storage | Which take-control session is open for a fight, so a reload returns to it | Until the session ends or you clear site data | Not needed (essential) |
simfinder/workspace/state | IndexedDB | Your workspace: the encounter you are preparing, the character sheets you added, saved parties and settings | Until you reset the workspace or clear site data | Not needed (essential) |
simfinder/workspace/sim-pace | IndexedDB | How long your last check took, to estimate the next | Until you clear site data | Not needed (essential) |
simfinder/workspace/sim-last:* | IndexedDB | The last result for an encounter, so it is there after a reload | Until you clear site data | Not needed (essential) |
simfinder-board-uploads/images/* | IndexedDB | Map images you put under the battle grid; they never leave your browser | Until you remove them or clear site data | Not needed (essential) |
challenges.cloudflare.com (Turnstile) | Third party (Cloudflare) | Cloudflare Turnstile, the bot check on the sign-in form. It loads only when the sign-in form shows a check, in a frame served by Cloudflare; what it stores is set by Cloudflare under its own privacy notice | Set by Cloudflare | Not needed (essential: protects sign-up from bots) |
4. Analytics
If analytics is configured and you say yes, the app sends short usage events to PostHog in the European Union (eu.i.posthog.com), with the identifier above. The events carry counts and categories only (for example "a check was started, 100 fights"), never your email address, user id, character names, sheets or any text you typed. The app sets no analytics cookie, and asks PostHog not to keep your IP address or build a profile of you.
If you say no, or do not answer, nothing is sent and no identifier is stored. You can withdraw your consent at any time from the account page or the footer: sending stops at once and the identifier is deleted.
5. Changes
When the app starts storing something new, we add it to this notice and publish a new version.