Cookie Policy
This Cookie Policy explains what cookies we use on Bloxed.gg, why we use them, and how you can manage your preferences.
Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently, provide a better user experience, and give website operators useful information.
Cookies can be "first-party" (set by the website you are visiting) or "third-party" (set by a different domain). They can also be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device for a set period or until you delete them).
This Cookie Policy should be read alongside our Privacy Policy.
We categorize our cookies into three types: Essential, Functional, and Marketing. Each is described below with the specific cookies we set.
Essential Cookies
These cookies are strictly necessary for the Platform to function. They cannot be disabled without breaking core functionality. No consent is required for essential cookies under GDPR.
| Cookie | Purpose | Duration |
|---|---|---|
bgg_access_token |
Authenticates your session after sign-in (httpOnly, not accessible via JavaScript) | 15 minutes |
bgg_refresh_token |
Allows seamless session renewal without re-login (httpOnly) | 30 days |
bgg_access_token_exp |
Mirrors the access token's expiry as an ISO timestamp (NOT httpOnly) so the browser can skip API calls when the token is already dead | 15 minutes |
bgg_refresh_token_exp |
Mirrors the refresh token's expiry as an ISO timestamp (NOT httpOnly). When this is past, the client redirects to sign-in without round-tripping the API | 30 days |
bgg_oauth_state |
CSRF protection during Roblox OAuth sign-in (httpOnly) | 10 minutes |
bgg_oauth_verifier |
PKCE security during Roblox OAuth sign-in (httpOnly) | 10 minutes |
bgg_return_to |
Remembers which page to return to after Roblox sign-in (httpOnly) | 10 minutes |
bgg_cookie_consent |
Stores your cookie consent preferences so we don't ask again | 1 year |
Functional Cookies
These cookies enable enhanced functionality and personalization. While not strictly necessary, disabling them may result in a degraded experience.
| Cookie | Purpose | Duration |
|---|---|---|
bgg_lang |
Remembers your preferred language | 1 year |
bgg_code_votes |
Tracks which game codes you've upvoted or downvoted from this browser, so you don't double-vote on the same code | 1 year |
bgg_email_verification_dismissed |
Remembers that you've dismissed the "verify your email" banner so it doesn't keep reappearing | 30 days |
Marketing Cookies
These cookies help us understand how visitors find our Platform and let us serve relevant advertising. They are only set if you consent to marketing cookies via our cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
bgg_ref |
Tracks referral source (e.g. UTM campaign parameters) | 30 days |
In addition, Google AdSense sets its own cookies when marketing consent is granted - see "Third-Party Cookies" below.
We use Cloudflare Web Analytics to understand how visitors use the Platform. Cloudflare Web Analytics is a privacy-focused analytics tool built into our hosting infrastructure that is fundamentally different from traditional analytics services.
Cloudflare Web Analytics does not use cookies or any form of persistent storage. It does not collect personal data, does not track users across websites, and does not build individual user profiles. It is fully GDPR-compliant without requiring cookie consent.
Because Cloudflare Web Analytics does not set cookies or process personal data, no consent is required for our analytics under GDPR, ePrivacy, or similar regulations. All analytics data is aggregated and anonymized - we can see which pages are popular and how users navigate the site, but we cannot identify individual visitors.
Some cookies may be set by third-party services that we integrate with. We minimize third-party cookies where possible. Advertising cookies (Google AdSense) are only loaded if you consent to marketing cookies.
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Cloudflare | __cf_bm |
Bot management - distinguishes humans from automated traffic | 30 minutes |
| Google AdSense | __gads, __gpi |
Advertising - serves and measures ads on the Platform | Varies (up to 13 months) |
NID, CONSENT |
Ad personalization preferences and consent state | Varies (up to 6 months) |
For more information, see Cloudflare's Privacy Policy and Google's Privacy Policy.
Google AdSense cookies are used to serve ads that are relevant to you. If you do not consent to marketing/advertising cookies, Google will serve non-personalized ads instead. You can manage your Google ad preferences at https://adssettings.google.com.
Cookie Banner When you first visit Bloxed.gg, you will see a cookie consent banner that lets you accept or decline non-essential cookies. You can change your preferences at any time by clicking the cookie settings link in the website footer.
Cookie Manager You can also manage your cookie preferences at any time using the cookie manager on our site. Open it from the footer and adjust which non-essential cookie categories you accept.
Browser Settings Most web browsers allow you to control cookies through their settings. You can typically find these options in your browser's "Settings", "Preferences", or "Privacy" menu. You can:
- View and delete existing cookies
- Block all cookies or only third-party cookies
- Set your browser to notify you when a cookie is set
- Clear all cookies when you close your browser
Essential cookies cannot be disabled - they are required for the Platform to function correctly (authentication, security, consent storage).
Please note that blocking essential cookies will prevent you from using core Platform features such as signing in.
We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, technical, or regulatory reasons. When we make changes, we will update the effective date at the top of this page.
If we introduce new categories of cookies or significantly change how we use existing ones, we will re-request your consent where required.
For legal inquiries, contact us at [email protected]