Cookie policy
Last updated: 10 October 2026
Cookies are small files a website stores in your browser. “Similar technologies” include local storage. This policy explains what we use on become.games (this website) and app.become.games (the game maker), and what published games use (spoiler: nothing tracking).
Change your choices
Optional analytics stay off unless you switch them on. You can change your mind any time.
Strictly necessary
These are needed for the service to work or to remember your privacy choice, so they don’t need consent.
| Name | Where | Purpose | Duration |
|---|---|---|---|
bg-consent (local storage) | become.games | Remembers your cookie choices | Until you change it or clear your browser storage |
__Host-bg_session | app.become.games | Keeps you signed in (HttpOnly, Secure, never shared with games) | Until you sign out, or 30 days without use |
__Host-bg_device | app.become.games | A random id for this browser so we can email you when your account is signed in to from a new device (security only, no tracking) | 400 days |
__Host-bg_oauth | app.become.games | Protects the Google sign-in step against forgery | 10 minutes (deleted when sign-in finishes) |
bg_ref, bg_ref_seen, bg_ref_by | .become.games, only after you follow a partner’s link (become.games/r/…) | Remembers which partner sent you, so you get the 10% discount you followed the link for and they get credit if you sign up; shows their first name in the discount note. Deleted when you sign in | 30 days (bg_ref_seen: 1 day, so a click is only counted once) |
__Host-bg_admin | app.become.games | Staff only: keeps a staff member’s own sign-in while they help with an account | 2 hours |
bg_pv_… | preview.become.games, only while you try a game you are making | Ties a preview to the browser that opened it, so the preview link can’t be passed around (HttpOnly, strictly necessary) | 1 hour |
bg:draft:…, bg:game:… (local storage) | app.become.games | Keeps the game you are making so it isn’t lost when you sign in | Until the game is saved, or you clear your browser storage |
Stripe cookies (e.g. __stripe_mid, __stripe_sid) | Stripe’s checkout pages (when payments launch) | Fraud prevention and payment, set by Stripe | Up to 1 year |
Cloudflare / Turnstile (e.g. __cf_bm, cf_clearance) | All our hosts, only when bot protection is triggered (on the contact and report forms, and in games only when a player saves a new leaderboard nickname) | Bot and abuse protection | 30 minutes – 1 year |
The game maker (app.become.games) asks the same question as this site and uses the same analytics (Google Analytics 4
and Microsoft Clarity, through Google Tag Manager) only if you say yes. Your choice is kept in a bg_consent
cookie on .become.games (strictly necessary: it remembers your answer for a year), so you’re asked once for this
site, the game maker and our demo games. It never uses advertising cookies.
Analytics (optional)
We load our analytics tools through Google Tag Manager. Tag Manager itself sets no cookies, and we only load it after you accept analytics or behaviour insights. It then runs only the tools you said yes to.
Google Analytics 4 helps us count visits and see which pages work. It only loads after you accept analytics.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Distinguishes visitors | Up to 2 years | |
_ga_<id> | Keeps session state | Up to 2 years |
Behaviour (optional)
Microsoft Clarity shows anonymised clicks, scrolls and heatmaps so we can fix confusing bits. It only loads after you accept behaviour insights.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_clck | Microsoft | Persists the Clarity user ID | 1 year |
_clsk | Microsoft | Connects page views into one session | 1 day |
CLID, MUID | Microsoft (set on Microsoft’s own domains) | Identifies the browser for Clarity | Up to 1 year |
Changing your mind
Use “Cookie settings” (above, or in the footer of every page) to switch analytics or behaviour insights off again.
We then stop the tools and delete the _ga, _ga_<id>, _clck and
_clsk cookies from our domain. Cookies Microsoft sets on its own domains (CLID,
MUID) can only be removed in your browser settings.
Google Consent Mode
We use Google Consent Mode v2 with every option set to “denied” by default. Google tags are not loaded at all until you agree, and advertising storage and personalisation stay denied even then: we don’t run ads.
Published games
Games people make on *.become.games set no cookies and load no analytics or trackers. The only exception is our own demo games (the ones we link to from become.games): they ask the same cookie question and, only if you say yes, use the same analytics as this site. Every game uses the player’s own browser storage only for things the player chose:
bg-nick: the nickname for the leaderboard;bg-best-…andbg-won-…: best score and whether the game was finished;- the mute setting, and
bg-pick(session storage, cleared when the tab closes): the character picked.
The only exception is the leaderboard bot check: when a player saves a new nickname, the game loads Cloudflare Turnstile from challenges.cloudflare.com. It is privacy-preserving, uses no tracking or advertising cookies, and never runs during normal play or for players who don’t save a name.
Your consent record
Your choice (what you chose and when) is stored in your own browser as bg-consent. When our consent
record service at allowkit.become.games goes live, a copy with a random ID, your choice, the time and the policy
version (no name or email) will also be kept there so we can show we respect it. If that service is
unavailable, your choice still applies.
Questions
Email hello@become.games.