Cookie And Storage Notes

What the app stores in this browser

These notes describe the current public app behavior as of May 26, 2026. They supplement the privacy notes and are not a complete legal cookie policy.

Launch status

The in-app controls exist locally, but production credentialed proof, a public support address, and final legal review are still required before broad public launch.

Essential storage

crossword_session: signed-in session cookie. It is used to keep you logged in and protect account routes for up to 30 days unless you sign out earlier.
Bot-protection storage may be used for login if bot protection is enabled. The app should load it only where needed for account protection.

Puzzle progress and preferences

crossword-progress:<puzzle>:r<rev>: local filled letters and puzzle state.
crossword-progress:<puzzle>:telemetry:r<rev>: local solve timing and assist telemetry.
crossword_progress_<puzzle>_r<rev>: legacy visible progress cookies from older builds. Current code clears these when present; they should not be used as the normal progress fallback for broad public launch.
crossword-nyan-enabled:v1: local appearance preference.
crossword-source-tracking-enabled:v1: local fallback preference used only when the Source Tracking server setting cannot be reached.
crossword-admin-metrics-token:v1: session storage convenience for internal admin metrics.

Source Tracking

Source Tracking is off unless you turn it on in Settings. When it is on, the app can store compact source buckets such as direct, search, social, shared-puzzle, daily-news, release-notes, and unknown.

crossword_source: first source bucket for internal acquisition reporting for up to 90 days when Source Tracking is on.
crossword_source_consent: records that Source Tracking is on for this browser for up to 365 days.
crossword_source_opt_out: records that Source Tracking is off for this browser for up to 365 days.

Turning Source Tracking off clears the server-set source cookie when possible and stops future source-cookie setting and source event writes from this browser. Turning it on stores crossword_source_consent; turning it off stores crossword_source_opt_out.

Clearing local data

Clear Browser Puzzle Data in Settings removes Crossword Study browser-local progress, solve telemetry, local preferences, legacy visible progress cookies, and visible Source Tracking choice cookies from the current browser.

It does not delete signed-in account data, revoke server sessions, clear HttpOnly cookies that JavaScript cannot access, or remove data already stored on the server. Use Profile for account export and account deletion.