Draft for review. This document describes what AxieFlash does today, but it has not had a legal review yet. Text in [brackets] is a detail the owner has not decided yet.
What cookies and browser storage are
Cookies are small files a website asks your browser to keep, so it can recognise you later. Browsers also have other storage that websites can use, such as localStorage, sessionStorage and IndexedDB. Apps can keep similar information on your phone. These are different things, so this page covers each one separately.
This website
The public pages of this website, the homepage and these legal pages, set no cookies and use no browser storage: no localStorage, sessionStorage, IndexedDB, cache storage or service worker. Their only script is our own, and it just closes the menu on phones. There is no analytics, advertising or tracking. Fonts and images come from our own server, so loading a page doesn't contact anyone else.
Our server does keep logs of requests (such as the IP address and the page asked for), and a short-lived counter per IP address to limit how often pages are requested. These stay on our server, not in your browser. See the Privacy Policy.
Staff-only admin pages
The AxieFlash team signs in to private admin tools on this server. Opening those pages sets two first-party cookies. Players and visitors don't use these pages and never get these cookies from the public pages.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
laravel-session | AxieFlash (first-party) | Keeps a team member signed in | 120 minutes after the last page opened | Strictly necessary |
XSRF-TOKEN | AxieFlash (first-party) | Protects the admin forms against cross-site request forgery | The same as above | Strictly necessary |
The app
The AxieFlash app doesn't use cookies. It keeps the following on your phone, in the app's private storage, which other apps can't read:
| Kind | What | Why |
|---|---|---|
| Necessary | Your login (encrypted), the account ID the app made, your card balance as last seen, and a queue of card spends and rounds waiting to be sent | The app can't work without them |
| Functional | Your settings (sound, music, Cloud AI), your username and user ID, your agreement to the Terms and Privacy Policy, your age confirmation, and your Cloud AI agreement | Remembers your choices |
| Your study data | Saved notes, study stacks, answer history, Library, XP, badges and streak | It's yours, and stays on your phone |
Your login is a token checked by our server, renewed with a secret that stays on your phone. It is not a cookie, and it is never put in your phone's backups.
Inside the app, Google provides sign-in and the fonts the app downloads, under Google's own terms.
How long it lasts, and clearing it
- Website: there is nothing to clear. The admin cookies end when a team member signs out or the session expires.
- App: everything stays until you delete your account, clear the app's data (Android Settings, Apps, AxieFlash, Storage, Clear storage), or uninstall the app.
- Clearing the app's data signs you out and erases your study data, XP and badges for good. If you signed in with Google, signing in again brings back your cards and Premium, but not that study data.
Consent and your choices
Everything above is necessary or remembers choices you made yourself. There are no optional cookies, analytics or advertising, so there is no cookie banner and no cookie preferences to set. We don't want to ask you to accept something that doesn't exist.
The one optional choice is sending your notes to Cloud AI. You make it in the app and can withdraw it in Settings, Legal & Privacy, Consent & Permissions.
If we ever add analytics or advertising, we will ask for your choice first, before anything is collected, and update this page.
Contact
axieflash, Pinamlayan, Oriental Mindoro, Philippines. Privacy: axieflashdeveloper@gmail.com