Cookie policy
Every cookie and every item Skala keeps in your browser: what it is, why, and for how long.
This is a translation of the Hebrew original. The Hebrew version is the binding one, unless the mandatory law of your country says otherwise.
In short
- Our cookies: two for signing in with Google, one for the language you chose, one with a random visitor ID for the usage statistics, and one that remembers you asked us not to count you.
- Everything else is in your browser's local storage: the device ID, nickname, character, preferences, guest packs and your ad choice.
- Google's ad at the top of the screen stores cookies of its own. In Israel it doesn't load until you choose on the card shown in its place, and in Europe Google asks you itself (when you are asked).
- We count how the site is used ourselves, and you can switch that off with the switch further down this page.
- You can delete it all in your browser settings, but then your nickname, character and guest packs are deleted too.
What these are
A cookie is a small piece of information a site keeps in your browser. Local storage (localStorage and sessionStorage) is similar, but it isn't sent to the server by itself. Every item in the table is our own (first party). Google's cookies, which come with the ad, are listed separately under Third parties.
The full list
| Name | Type | Purpose | How long | Category |
|---|---|---|---|---|
| alh_session, alh_oauth | Cookies | Signing in with Google: keeps you signed in and protects the sign-in against forgery | 60 days or until you log out (alh_oauth: 10 minutes) | Strictly necessary |
| alharetzef.deviceId, alharetzef.tabId | localStorage, sessionStorage | Your random game ID (and a separate one for a tab opened with ?fresh). Also the key of the device stats | Until you clear the site's data (tabId: until the tab closes) | Strictly necessary |
| alharetzef.nickname, alharetzef.avatar, alharetzef.color | localStorage (or sessionStorage) | The nickname, character or photo, and colour you chose | Until you delete it | Your preference |
| alharetzef.lang | Cookie and localStorage | The interface language you chose | The cookie: 1 year | Your preference |
| alharetzef.music, alharetzef.sfx, alharetzef.hideSecret | localStorage | Music, sound effects, and whether to cover your secret target on screen | Until you delete it | Your preference |
| alharetzef.packs.v1, alharetzef.unlocks.v1, alharetzef.likes.v1 | localStorage | Your guest packs, what you unlocked, and the questions you marked as liked | Until you delete it | Needed for the feature you chose |
| alharetzef.ads.consent.v1 | localStorage | Your ad choice (personalized or general) and when you made it. Kept only for people who get our choice card | Until you change or delete it | Your choice |
| alharetzef.demo | localStorage | Which demo card the home page shows next (a number only, sent nowhere) | Until you delete it | Functional |
| alh_vid, alharetzef.analytics.vid | Cookie and localStorage | A random visitor ID for the usage statistics, separate from the game's ID | 13 months from when it was created, never extended | Usage measurement |
| alharetzef.analytics.sid, alharetzef.analytics.sat | localStorage | The current visit's ID and when you were last active | Replaced after 30 idle minutes | Usage measurement |
| alharetzef.analytics.optout, alh_oo | localStorage and cookie | You asked us not to count you (the cookie tells the server too) | Until you switch counting back on (the cookie: up to 10 years) | Your preference |
When you are asked
Our own items: no question. Almost everything in the table is needed for the game to work, or remembers a choice you made yourself, and the law doesn't require consent in advance for those. We have no pixels, other companies' analytics tools or embedded content, and the fonts are served from our own server.
The usage statistics (alh_vid and the items that start with alharetzef.analytics) are built to the conditions European data protection authorities, such as France's CNIL, set for audience measurement without consent in advance: our own use only, totals only, no third party and no advertising, an ID that expires after 13 months, data deleted after 25 months, no IP address, and you can switch it off at any time. The same goes under Israeli law: we told you what is counted and why, and gave you a simple way to say no.
Ads: you are asked, depending on where you are:
- In Israel: a card with two equal buttons appears first in the ad's place, with nothing selected in advance, and nothing from Google loads until you tap one. “Sounds good” = personalized ads: Google may use cookies and identifiers to tailor ads to your activity on this site and other sites. “Only general” = ads based on the context only (the page, the language and the general area), with no personalization. Even then, Google uses cookies to limit how often you see the same ad and to measure ads as totals. You get the card if your device is set to Israel time or your browser is in Hebrew. This is checked in the browser and sent nowhere.
- In Europe, the UK and Switzerland: Google shows its own consent message (a platform certified under the IAB TCF standard), with the list of vendors and purposes. If you don't agree, Google shows only limited ads.
- Everywhere else: there is no question, and ads may be personalized according to your Google settings. You can turn that off in Google's ad settings.
In Israel and in Europe you can change your choice at any time with the “Ad settings” link next to the “AD” label.
Third parties
Google (AdSense). The ad at the top of the screen loads from Google's servers (such as googlesyndication.com and doubleclick.net) after the page has finished loading, and in Israel only after you chose on the card. Google keeps cookies under our site's name and on its own domains. These are the cookies Google lists for this service. Google may change them; the current list is on Google's site:
| Name | Where it is kept | Purpose | How long |
|---|---|---|---|
| __gads, __gpi, __gpi_optout | Under our site's name | Showing ads, limiting how often they repeat and measuring them, and for people who agreed, personalization too (__gpi_optout remembers that you said no) | 13 months |
| __eoi | Under our site's name | Security and ad fraud detection | 6 months |
| TESTCOOKIESENABLED | Under our site's name | Checking that the browser accepts cookies | 1 minute |
| id, DSID, test_cookie | doubleclick.net | Showing ads, remembering your personalization setting, and checking that the browser accepts cookies | id: up to 24 months (13 in Europe), DSID: 2 weeks, test_cookie: 15 minutes |
| FCCDCF, FCNEC | Under our site's name, only in Europe, the UK and Switzerland | Your choice in Google's consent message, and measuring the message itself | FCCDCF: 13 months, FCNEC: 1 year |
Google and its advertising partners use the information under Google's policy. Other ad networks Google approves may also show ads and keep cookies. You can ask them not to tailor ads to you at aboutads.info and youronlinechoices.eu.
Also: when you sign in with Google, you go to Google's page, and Google manages its own cookies there. Cloudflare, the protection network in front of the server, keeps a security cookie (cf_clearance) only if, during an attack, it has to check that you are a person and not a program.
How to control it
You can delete the site's cookies and storage in your browser settings. Then you are logged out, your nickname, character and preferences reset, your guest packs and unlocks are deleted, the device gets a new ID, and you are asked about ads again.
Ads: the “Ad settings” link next to the “AD” label reopens the choice (in Israel our card, in Europe Google's message). To turn off Google's personalized ads on every site: Google's ad settings. For other networks: aboutads.info and youronlinechoices.eu. An ad blocker, or blocking third-party cookies in your browser, doesn't break the game.
To keep yourself out of the usage statistics, use the switch here. Your browser stops sending and deletes the visitor ID, and the alh_oo cookie tells our server not to record your game events either. The same happens by itself if your browser sends Global Privacy Control or Do Not Track. Clearing the site's data also clears this request, so switch it off again afterwards.
Changes
When we add or change an item, we update the tables and the date. If we add something that needs consent, such as a new ad provider or purpose, we will ask for it before it runs. Version 2.1, last updated 20 October 2026.