Draft for review
Cookies
Bracketed fields are not filled in. This page describes the Carramba code as of 7 October 2026. It is not a statement that the site is legally compliant. A qualified professional should review it before you rely on it.
Strictly necessary
- caramba_pid — httpOnly session cookie, about 30 days, keeps the same seat at a table.
- Supabase auth cookies — only after you log in, so the account session works.
Preferences on this device
Sound and motion choices, and the advertising choice itself, are stored in localStorage after you set them. They are not sent to an advertising network.
Advertising
No Google advertising script loads until three things are true: you accepted advertising, your account is not ad-free or premium, and a real AdSense publisher id is configured. Until that id exists, the dashed “Advertisement” boxes are part of Carramba and do not set a third-party cookie.
A homemade banner is not a Google-certified consent management platform. Before personalized AdSense ads run for people in the EEA, UK, or Switzerland, Google requires a certified TCF CMP. Google’s own Privacy & messaging tool is CMP ID 300. Turn that on in AdSense before you put the publisher id in production.
There is no analytics cookie and no advertising personalization cookie in the current build.