Legal
Cookie Policy
Last updated: July 2026
What cookies and analytics we use
Nakama TCG uses strictly necessary cookies for authentication, waitlist state, and notice preferences. With your permission, we also use analytics to understand page visits and, separately, Google Ads conversion measurement for launch signups and important storefront actions. You can accept either purpose without accepting the other.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase authentication session | Session / 1 year |
| nk-cookie-consent | Remembers your cookie consent choice in this browser | 1 year |
| nk-google-ads-attribution | Keeps Google Ads click identifiers after you accept advertising measurement | Up to 90 days |
| nk-waitlist | Remembers whether your waitlist signup is pending or confirmed | 1 year |
| _ga / _ga_* | Google Analytics measurement after you accept analytics cookies | Up to 2 years |
| _gcl_* / Google tag storage | Google Ads conversion measurement after you accept advertising cookies | Set by Google |
Third-party services
- Stripe may set cookies during the checkout process for fraud prevention. See Stripe’s privacy policy.
- Supabase sets authentication cookies. See Supabase’s privacy policy.
- Vercel provides hosting and anonymous analytics so we can understand store usage and improve performance.
- Cloudflare Turnstile protects the waitlist from automated abuse. It processes a short-lived challenge token and browser/network security signals as a strictly necessary security measure; it is not used by Nakama for advertising.
- Google Analytics measures consented page visits and interactions. If you also accept advertising cookies, Google Signals can provide aggregated demographic and interest reporting from signed-in users who have enabled Ads Personalization. See how Google uses information from partner sites.
- Google Ads measures advertising conversions after you accept advertising cookies. For waitlist confirmations, we may send a hashed version of your email as enhanced conversion data. For completed purchases, our server may also provide the matching transaction ID, timestamp, value, consent signals, ad click identifiers and a server-generated email hash. Google does not receive your raw email, delivery address or purchased-product details from this database connection.
Managing cookies
You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or completing purchases.
Contact
Questions about cookies? Email privacy@nakama.cards.