2026-11-20-mainnet-v1
Cookies and storage
Scheduled effective date: 11/20/2026 at 12:00 PM UTC.
1. What storage means
Cookies are small browser files. localStorage and sessionStorage follow different storage rules but may also require notice and consent. This policy covers these and equivalent technologies. Fingerprinting is not used as a hidden alternative to cookies.
Necessary does not mean everything useful to a business: it means communication or a requested function actually needs it. User-requested preferences and match secrets have a limited functional purpose, not advertising reuse.
2. Current configuration and categories
The landing serves local assets and does not set game authentication cookies. Both sites remember privacy preferences. Google Analytics loads only if you allow analytics; advertising, GTM and newsletters remain disabled. Rejection does not prevent browsing or play.
Analytics measures usage without identifying pilots by wallet. Advertising/marketing covers campaign measurement and behavioral advertising only when enabled and authorized. Personalization adapts non-requested content to interests. All three default off; unavailable categories cannot be accepted. Necessary storage cannot be switched off in the panel, but browser deletion remains possible and may lose a session or a match secret.
On a first visit without saved choices, an information notice appears. Continue with necessary storage only or open settings. This does not activate Analytics, advertising or advance permissions for future tools. Existing valid choices, including an applied GPC signal, are not repeatedly requested on each page.
3. Verified first-party inventory
The table distinguishes logical expiry from physical deletion. Functional session/preferences storage appears when its feature is used. Variable keys are shown as patterns. The items below serve functional purposes or remember privacy choices.
| Name / pattern | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| airbattle_web_session | Air Battle / CMM SMART AI SOLUTIONS LLC | Authenticate the requested session. Secure in production. | Up to 6 days; revocation on confirmed sign-out. | Cookie · HttpOnly · SameSite=Lax |
| airbattle_web_challenge | Air Battle / CMM SMART AI SOLUTIONS LLC | Bind the sign-in challenge; path /api/web/auth. | 5 minutes; cleared on verification. | Cookie · HttpOnly · SameSite=Strict |
| airbattle_world_id_request | Air Battle / CMM SMART AI SOLUTIONS LLC | Bind the requested World ID proof; path /api/web/world-id. | 5 minutes; cleared on verification. | Cookie · HttpOnly · SameSite=Strict |
| airbattle_world_id | Air Battle / CMM SMART AI SOLUTIONS LLC | Retain World ID verification for this session. | Up to 6 hours. | Cookie · HttpOnly · SameSite=Lax |
| airbattle_world_app_challenge | Air Battle / CMM SMART AI SOLUTIONS LLC | Bind World App wallet sign-in; path /api/web/world-app. | 5 minutes. | Cookie · HttpOnly · SameSite=Strict |
| airbattle_locale | Air Battle / CMM SMART AI SOLUTIONS LLC | Remember requested language. | No automatic TTL; until changed or cleared. | localStorage |
| airbattle_settings | Air Battle / CMM SMART AI SOLUTIONS LLC | Chosen theme, sound and vibration; no advertising profile. | No automatic TTL; until changed or cleared. | localStorage |
| airbattle:web:wallet-provider | Air Battle / CMM SMART AI SOLUTIONS LLC | Remember the selected connection method. | No automatic TTL; until changed or cleared. | localStorage |
| airbattle:web:session-changed | Air Battle / CMM SMART AI SOLUTIONS LLC | Cross-tab synchronization; ephemeral WebWalletProvider key. | Written and removed in the same operation. | localStorage · evento efímero |
| airbattle:attention:cues:v1 | Air Battle / CMM SMART AI SOLUTIONS LLC | Prevent duplicate audio cues across tabs. | Useful entries up to ~185 seconds; cleanup on use, not guaranteed immediate physical deletion. | localStorage |
| airbattle:web:rps:<partida>:<wallet>:<red> | Air Battle / CMM SMART AI SOLUTIONS LLC | Retain RPS choice and secret for reveal. | Tab session; removed after reveal or phase advance. | sessionStorage |
| airbattle:web:deployment:<partida>:<wallet>:<red> | Air Battle / CMM SMART AI SOLUTIONS LLC | Fleet draft scoped to match context. | Tab session; removed on confirmation; browser restoration varies. | sessionStorage |
| airbattle:web:submission:<wallet>:<red>:<partida>:<finalidad> | Air Battle / CMM SMART AI SOLUTIONS LLC | Recover submission references and avoid duplicate operations. | Tab session; cleared on confirmed operation. | sessionStorage |
| airbattle:hero-draft:<wallet>:<red> | Air Battle / CMM SMART AI SOLUTIONS LLC | Administrator homepage content draft. | Tab session or draft dismissal. | sessionStorage · solo administración |
| airbattle_privacy_choices_v1 | Air Battle / CMM SMART AI SOLUTIONS LLC | Store privacy choices per origin, without wallet, IP or email. | Preferences: 180 days or earlier version change. Advertising opt-out: at least 12 months after the choice or GPC signal. Logical expiry, not immediate physical deletion. | localStorage |
| airbattle:bot:deployment:<wallet>:<partida> | Air Battle / CMM SMART AI SOLUTIONS LLC | Bot simulator fleet draft. | Tab session; removed on confirmation. | sessionStorage |
| airbattle_privacy_choices | Air Battle / CMM SMART AI SOLUTIONS LLC | Remember current choices across official subdomains over HTTPS. Analytics permission requires a verified receipt; contains no wallet credentials. | Preferences: 180 days; advertising opt-out: at least 12 months. | Cookie · Secure · SameSite=Lax · Domain=air-battle.com · Path=/ |
| _ga / _ga_6HSKB559FW | Google Analytics 4 | Browser and session identifiers for visit measurement, only with analytics consent. | Up to 180 days under the tag configuration; accessible cookies are removed on withdrawal. | Cookie · opcional / optional · Analytics |
4. Providers and storage still to verify
Reown/WalletConnect, Coinbase Wallet, World App and the World ID popup may open other origins and use their own connection storage. Behavior depends on the provider, version and device. Connecting a wallet does not consent to advertising. See the official policies linked in our privacy notice or email support@air-battle.com for information about their technologies.
5. Google Analytics with consent
Only after analytics acceptance does Google Analytics 4 (G-6HSKB559FW) load and potentially set _ga and _ga_6HSKB559FW to recognize the browser and session. The tag is configured for a maximum expiry of 180 days, without automatically extending it on each visit. Browser controls may shorten that period. Google Ads cookies are not installed.
Basic Consent Mode: analytics_storage becomes granted only after acceptance. ad_storage, ad_user_data and ad_personalization remain denied. Withdrawal blocks new sends, removes accessible analytics cookies for this site and reloads without the tag. Withdrawal does not automatically delete data already received by Google; contact support to exercise your rights.
GTM-WD7PGD2H is not loaded, avoiding duplicate installation or additional tags. Corporate identifiers GTM-WZGLXDDH and G-JSE8MCLYBM are not used in Air Battle.
6. Choices, withdrawal and opt-out
Open “Privacy settings” from any page. Reject all optional categories, accept available categories or save a selection. Rejection alone does not prevent browsing or play. Withdrawal applies to the future without changing lawfulness of prior processing. It prevents new optional loads; if tags had run, their verified withdrawal and deletion mechanisms must be applied.
“Do Not Sell or Share My Personal Information” records an advertising sale/sharing opt-out. GPC overrides earlier marketing choices while active. The audited configuration does not engage in that sale/sharing. These choices require no sign-in or identity verification.
General preferences last 180 days; advertising opt-outs are remembered for at least 12 months. Over HTTPS, the necessary airbattle_privacy_choices cookie remembers current choices across air-battle.com, www.air-battle.com and its subdomains, including play.air-battle.com. It contains no wallet, email or sign-in cookies. A shared analytics permission is applied only after server receipt verification; a modified cookie is not proof of consent. It does not authorize new purposes or future providers. Localhost preferences remain separate by origin. Clearing storage or changing devices may require another choice. GPC overrides marketing.
7. Contact and updates
Contact: support@air-battle.com. Scheduled effective date: 11/20/2026 at 12:00 PM UTC. Changes to optional providers or purposes will be explained and renewed consent obtained where required before activation.