DESTAN GAME
Cookie Policy
Draft · legal review pending This text describes how the product works today. Its legal review has not been completed yet, so it is not the final version.
What are cookies?
Cookies are small text entries that a website stores in your browser and that are sent back to the site with later requests. This policy also covers similar entries in browser storage (localStorage and sessionStorage).
Types of cookies
Cookies are divided into the following types according to their purpose. This site uses only the first four types; the name, purpose and lifetime of each cookie are given in the table in the next section.
- Strictly necessary cookies
- Cookies the site needs in order to work. All the cookies shown as “Strictly necessary” in the table in the next section are of this type; signing in, protecting your account and sending actions securely do not work without them.
- Session cookies
- Cookies that recognize that you are signed in and keep your session open.
- Security cookies
- Cookies that stop actions on your account from being sent on your behalf by another website, and that recognize your browser as one of your account's devices.
- Preference cookies
- Cookies that remember a setting you chose. On player pages, your language choice is kept in the page address, not in a cookie; only the console language chosen by staff in the operator console is kept in a preference cookie.
- Analytics cookies
- Cookies that collect visit statistics. They are not used on this site.
- Marketing cookies
- Cookies used for advertising, retargeting or profiling. They are not used on this site.
The cookies the site uses
All of the cookies below are first-party cookies: they are created only by this site and sent only to this site. Except for the console language cookie, all of them are strictly necessary; signing in, protecting your account and sending actions securely do not work without them. The console language cookie is written only when the language is changed in the operator console and contains nothing but the chosen language (tr or en).
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
destan_session | Recognizes that you are signed in and keeps your session open. It contains only a random session key.Set only for players who sign in. | Deleted when the browser is closed.The server ends the session after 2 hours of inactivity or after 12 hours at the latest.Kept for up to 30 days if “Keep me signed in” was selected. | Strictly necessary, first partyCannot be read by page scripts (HttpOnly). |
destan_device | Recognizes the browser you sign in with as one of your account's devices; used for extra verification on sign-ins from new devices and for your device list.Set in the browser of anyone who signs in: players on the site and staff in the operator console. | 400 days | Strictly necessary, first partyCannot be read by page scripts (HttpOnly). |
destan_csrf | A security key that stops actions on your account from being sent on your behalf by another website.Set in every browser that visits the site. | 30 days | Strictly necessary, first partyCan be read by page scripts; this is required so it can be added to this site's own requests. |
destan_operator | Recognizes authorized staff of the Service Provider who sign in to the operator console.Set only for staff who sign in to the operator console; never set for players. | Deleted when the browser is closed.The server ends the session after 30 minutes of inactivity or after 8 hours at the latest. | Strictly necessary, first partyCannot be read by page scripts (HttpOnly). |
destan_operator_lang | Remembers the language chosen in the operator console (Turkish or English); it holds nothing else.Set only when the language is changed in the operator console, and sent only to console pages; never sent to player pages. | 365 days | Preference, first partyCan be read by page scripts; the console page writes it when the language is changed. |
destan_appeal | Recognizes the limited access to the appeal page of a suspended account: it only allows reading, submitting, answering and withdrawing that account’s appeal and does not sign anyone in. It holds a random key and is sent only with appeal requests.Set only in the browser that opens the emailed appeal link of a suspended account. | 30 minutes | Strictly necessary, first partyCannot be read by page scripts (HttpOnly). |
The cookies are sent only over encrypted (HTTPS) connections, and sending them with requests started from other websites is restricted. The operator session cookie uses the strictest setting for this.
The session cookie and “Keep me signed in”
When you sign in, only a random session key is written to your browser; your username, e-mail address and password are never written to the cookie. If you do not select “Keep me signed in”, the cookie is deleted when you close your browser. If you do, it stays in your browser for the time shown in the table.
Whatever the cookie's lifetime, the session is also limited on the server: a session that is not used for a while, or that reaches its maximum lifetime, is ended. You can see and end your open sessions on the Active Sessions page.
The device cookie
The device cookie carries a random device ID so that the browser you sign in with can be recognized as one of your account's devices. This lets sign-ins from new devices be protected with extra verification, and lets you recognize your browser on the Devices page. The server keeps only a hash of this ID.
Entries in browser storage
For a few conveniences, the site also keeps the following entries in your browser's storage. Unlike cookies, they are not sent to the site with every request; you can delete them together with the site data in your browser settings.
| Entry | Purpose | Duration |
|---|---|---|
destan.auth.lock | When an account is temporarily locked, it holds the moment the lock ends, so the remaining waiting time can still be shown after a page reload. It contains no information about your account. | In tab storage (sessionStorage); deleted when the tab is closed. |
destan.support.chat-draft | When you turn a live support conversation into a support ticket, it carries what you wrote over to the ticket form. It is read when the form opens and deleted right away. | In tab storage (sessionStorage); deleted when the tab is closed. |
destan.notice.dismissed | Remembers the site notice you closed, so the same notice is not shown again. It contains only the notice's ID and version. | In persistent local storage (localStorage); kept until you delete it. |
destan.operator.desk.seen | Used only on the live support desk of the operator console: keeps how many messages staff have seen in each conversation, so unread markers survive a page reload. It holds nothing but conversation IDs and counts, and it is never written in players' browsers. | In tab storage (sessionStorage); deleted when the tab is closed. |
destan.operator.draft.* | Used only in the operator console: keeps a per-tab copy of unsaved console edits (content drafts, ticket replies), so work survives an expired session or a page reload. It is deleted on save, send, discard or sign-out and when the tab closes, and it is never written in players' browsers. | In tab storage (sessionStorage); deleted when the tab is closed. |
destan.appeal.accessUntil | Holds when access to the appeal page ends, so a page reload or a new tab returns to the appeal without asking for a new link. It contains neither the access key nor any information about your account. | In persistent local storage (localStorage). Removed at once when you end the access; when the access runs out it is no longer valid, and the appeal page removes it the next time it opens. |
Cookies that are not used
- Analytics or statistics cookies.
- Advertising, retargeting or profiling cookies.
- Cookies of social media plug-ins.
- A language cookie on player pages: the language you choose is kept in the page address (for example /en).
The site's security policy does not allow scripts, fonts, images or frames to be loaded from other websites. As a result, no third-party cookies are created on the site's pages.
The payment page you are taken to when buying Cash belongs to the Payment Service Provider; any cookies used there are subject to that institution's own policy.
Your choices
As player pages use only strictly necessary cookies, no cookie preference window is shown. The operator console's language cookie is written when staff change the console language themselves.
You can delete or block cookies in your browser settings at any time. If you block these cookies, you will not be able to sign in or manage your account; you can still read the public pages.
Deleting the session cookie ends your session in that browser. Deleting the device cookie means your browser is treated as a new device the next time you sign in.
If a non-essential cookie is ever used in the future, your consent will be asked for before that cookie is written. The “Accept”, “Reject” and “Manage preferences” options are presented with the same visibility and without steering you toward any of them; your choice is recorded and can be changed at any time. No such cookie is written unless you give your consent.
Changes
When the cookies the site uses change, this policy and its tables are updated, and the current version is published on this page with its version number and date. No cookie is used that this policy does not describe.
Contact
You can send questions about cookies to the contact e-mail address given in the Privacy Policy; that policy also explains how your personal data is processed in general.