Cookie Policy
Last updated: 27 September 2026
Current status: web advertising and its consent platform are not enabled. The site currently runs no AdSense tag, no third-party audience analytics and no advertising tracker. Only the necessary or user-requested storage described below is used.
1. Scope
This policy covers loadia.app, its public catalogue and the signed-in web application. Advertising choices in the iOS or Android app are managed separately inside the app; please also read our Privacy Policy.
A “cookie” is a small item of data stored by the browser and sent to the server on later requests. The site also uses local storage and session storage, which stay in the browser and are not automatically sent with every request.
2. Storage used today
| Name or category | Purpose | Retention |
|---|---|---|
loadia_lang, loadia:locale | Remember the language you selected. | Until site data is cleared. |
loadia:theme, loadia:skin, loadia.density | Apply the appearance and density choices you requested without varying public pages cached for other visitors. | Until you change the choice or clear site data. |
loadia.cookieNotice.v1 | Remember that you have seen the necessary-storage information, so it is not shown on every visit. | 180 days. |
loadia.gameCards.v2 (session storage) | Temporarily cache the titles and artwork needed by your signed-in collection to avoid repeated loading. It holds catalogue cards only, never your library. | Until the tab session ends. |
loadia:plus | Remember that the account signed in on this browser has Loadia Plus, so the Loadia Plus promotional banner is not shown on public catalogue pages. It holds no identifier. | Until sign-out, a change of account, the end of Plus, or site-data deletion. |
loadia.discover.deck.v1:* | Resume your Discover recommendations and your place in them after a reload, separately for each signed-in account. | Replaced as you use Discover; kept until site data is cleared. |
loadia.anon.v1 and its recovery identifier | Keep games added on this device before account creation, then transfer that collection once after you sign in. | Until confirmed transfer to your account or until site data is cleared. |
loadia.accountId and temporary recovery markers, including loadia:invite-session-recovery-at (session storage) | Connect the web app to the correct signed-in profile and safely finish an interrupted profile-creation or security operation. loadia:invite-session-recovery-at holds only the time of the last automatic attempt to renew an expired session, so the page retries at most once a minute instead of reloading in a loop. | Until sign-out, completion of the relevant operation or site-data deletion. Session-renewal time: until the tab session ends. |
loadia.snapshot.ops.v2:*, loadia.logProjection.v1:*, loadia.listProjection.v1:*, and loadia.pendingProfileClaim.v1:* | Locally journal an interrupted sync, list publication, or profile publication so it can resume without losing or repeating a change. | Until the operation is confirmed, sign-out, or site-data deletion. |
__Host-sb-…-auth-token, any numbered fragments and the code-verifier | Maintain your Loadia session and secure the return from an OAuth sign-in. These cookies are required for sign-in; they are host-only, sent over HTTPS, use SameSite=Lax, and may be split when a session exceeds one cookie's size. | Session: up to 400 days with renewal, removed at sign-out. Verifier: until the OAuth flow completes or expires. |
loadia.appleOAuth and loadia.appleOAuth.cancelled (session storage) | Where Sign in with Apple is offered on the web: secure the return from that sign-in. loadia.appleOAuth.cancelled remembers, for this tab, a Sign in with Apple you cancelled, so that its session cannot reopen the consent step. | Apple sign-in marker: up to 15 minutes. Apple cancellation marker: until the tab session ends. |
__Host-loadia-steam-result | Pass the protected result of a Steam import you requested to the web app once. | Up to 10 minutes, then removed after reading. |
__Host-loadia-xbox-state | Protect the return from Microsoft's sign-in page when you connect Xbox on the web. Host-only, HTTPS-only, not readable by page scripts (HttpOnly), SameSite=Lax. | Up to 10 minutes, removed once used. |
__Host-loadia-xbox-code | Hold the single-use code returned by Microsoft just long enough to finish connecting Xbox. Host-only, HTTPS-only, HttpOnly, SameSite=Lax. | Up to 5 minutes, removed after use. |
This storage is used only to provide features you request: sign-in, sync, recovery of a local collection, Steam and Xbox connections, resuming Discover and interface preferences. It is not used to build an advertising profile.
3. Planned, but inactive, web advertising
Loadia plans to fund some public pages of the free tier with Google AdSense. This remains disabled until the site is complete, the account and placements are approved, and a Google-certified consent management platform compatible with IAB TCF v2.3 is installed across every relevant page.
After activation, affected visitors will be able to accept, refuse or manage each purpose before any non-essential storage is used. With consent, Google and its partners may use cookies or other storage to serve and measure ads, which may be personalised. After refusal, no advertising tracker that requires consent should be read or written. The site and catalogue will remain accessible.
An active Loadia Plus subscription will remove ads. If an account's Plus status cannot be confirmed, Loadia will not send an ad request: uncertainty is treated as Plus for this decision.
4. Manage or withdraw your choices
There are no web advertising choices to manage today because no web advertising tracker is active. When advertising is enabled, a “Manage cookie choices” link available from every page will reopen the consent platform. Refusing will be as easy as accepting, and withdrawing consent will be as easy as giving it.
You can also delete or block data for loadia.app in your browser settings. Blocking necessary storage may prevent sign-in, sync or preference persistence from working.
5. Contact and changes
We will update this page before enabling any new tracker, including its purposes, responsible parties and actual retention period. Questions: contact@loadia.app.