Cookie Policy

Cookies are small text files stored on your device by your browser. We also use related technologies such as localStorage, session storage, and tracking pixels. For simplicity, this page refers to all of them as "cookies".

We group our cookies into four categories. You can opt out of any category that is not strictly necessary.

• Strictly necessary — login session, cart contents, security tokens, checkout flow. The Service cannot function without these and we do not seek your consent for them.
• Preferences — your selected language, currency, country, theme, and similar settings. Stored to remember your choices across visits.
• Analytics — aggregate usage measurement to find broken flows and improve the catalog. We never join this data to your identity for advertising.
• Marketing — only set if you opt in. Used to measure the effectiveness of our newsletter and any external campaigns.

The current inventory of cookies and browser storage we set on this Service:

Cookies

• refresh_token — strictly necessary — keeps you signed in (HttpOnly) — up to 30 days.
• gp_persist — strictly necessary — your “remember me” choice — 30 days.
• sessionid / csrftoken — strictly necessary — session & form security.
• NEXT_LOCALE — preferences — your language — 12 months.
• NEXT_COUNTRY — preferences — your storefront country — 30 days.
• ph_* (PostHog) — analytics — product analytics identifier — only set after you accept analytics; 12 months.

Local / session storage (not cookies, but similar technology)

• cart, gameplug_user, cookieConsent, cookieSession — strictly necessary — cart contents, profile cache, and your consent choice.
• theme, gp-lang, currency, selectedCountry and similar keys — preferences.
• gp_wishlist, gp_news_popup_v1 — preferences — wishlist and popup frequency capping.
• bi_sid — analytics — anonymous session id, only after you accept analytics.

Third parties that may set their own cookies or receive requests

• Stripe — on the secure checkout page, for fraud prevention and payment methods (see Stripe's Cookie Notice).
• Cloudflare Turnstile — bot protection on sign-in, sign-up and contact forms.
• Sentry — error monitoring (technical error reports; no advertising).
• Google Fonts — font files are loaded from Google's servers, which receive your IP address as part of the request.

We do not use Google Analytics, Meta/Facebook pixels, TikTok pixels, or any third-party advertising trackers.

You can change your consent at any time via the “Manage cookies” link at the bottom of every page. You can also block cookies entirely in your browser settings; doing so will break login and checkout.

We honour the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat that as an opt-out of every non-essential category.

If we add new cookies in a new category, we will surface a fresh consent banner. The full inventory above is updated whenever a cookie is added or removed.

Email [email protected] with cookie or tracking questions.