Cookies and local storage

1. Public pages

Reading the home, game, news, media or legal pages does not create a new application browser session. External services are contacted through your deliberate link click. This describes the delivered application; additional plugins, embeds, hosting statistics or advertising require a fresh check before activation. Anonymous forum category/topic reading also creates no new session. An existing session is used for requested signed-in forum access. Report, status and participation forms require a protected session.

2. Necessary session cookie

Name: rw_session. Provider: the RECLAIMWARD operator, Kevin Rasch. Purpose: secure forms, protection against forged form submissions, login and temporary status messages. It holds a random reference, not readable account details.

It is used for the relevant form/account functions, is limited to our website, HttpOnly and SameSite=Lax, and Secure in HTTPS production. It is a session cookie; some browsers restore session cookies after restart. Server-side authenticated sessions independently expire after 30 minutes idle or 12 hours absolute. You can end individual or all logins in security settings. After logout a new unauthenticated reference may remain for form protection.

3. Legal basis

Storage/access strictly necessary for your expressly requested form/account service relies on section 25(2) no. 2 TDDDG without separate cookie consent. Subsequent personal-data processing relies on GDPR Article 6(1)(b) or (f), according to purpose. This does not authorise unnecessary tracking. Optional tracking is currently inactive, which is why no consent banner is shown.

4. Your controls

There are currently no optional cookie categories to select or withdraw. You can delete or block cookies in your browser; login and protected forms cannot work reliably without the necessary cookie. Public information is generally available without an account. The app stores no access tokens in localStorage and uses no service worker. Security-link tokens may appear temporarily in the URL fragment, then move into the confirmation form and are removed from the visible URL by JavaScript.

5. Future optional services

Any future analytics, advertising or embedded-media service requiring consent will load only after separate valid consent. Refusal and later withdrawal must be easy. These details and the privacy policy will be updated before activation.

Steam and security verification

The existing necessary session temporarily holds Steam linking and second-factor verification state. Subscriptions, read positions and notifications are stored on our server. These features add no analytics or marketing cookies. Steam’s sign-in page uses its own cookies according to its notices.