DungeonMinion
Legal

Cookie policy

Last updated 10 November 2026

How we use cookies

BYTEWORKS DIGITAL SERVICES S.L. uses cookies and similar browser storage on dungeonminion.com. This is the cookie policy required by the ePrivacy Directive and Spanish LSSI-CE. See also the privacy policy.

You can change your choice at any time: .

Strictly necessary

These run the service, so they don't need consent. We never use them for advertising.

  • dm_session: first-party, HttpOnly, 30 days. Keeps you signed in. Set when you open a sign-in link.
  • dm_guest: first-party, HttpOnly, one year. Remembers you at a table you joined as a guest. Set only when you join as one.
  • dm.consent: first-party local storage. Remembers Accept or Reject, so we don't ask on every visit.
  • dm.owlbear.token: first-party local storage, in the Owlbear Rodeo panel only. Holds the connection you approved, until you disconnect it.

Your work and preferences

These are in your browser's local storage. They aren't cookies, aren't sent to us and don't track you.

  • dungeon-minion:map and dm.atlas.*: the map you're working on, so it's there when you come back.
  • dungeon-minion:animate, dungeon-minion:ghosts, dungeon-minion:layers-folded, dungeon-minion:surprise-genres and dungeon-minion:small-screen-note: how you like the editor set up.
  • dm.signedIn: that this browser was signed in, so the header doesn't flash a sign-in link.

Traffic statistics, no cookies

We count visits ourselves, on our own server: pages seen, where a visit came from (the site, or the tags on the link), and a few steps like making or saving a map. Nothing is set on or read from your device for it; the privacy policy says how visitors are told apart for a day without keeping who they are. We may also count visits with Ahrefs Web Analytics: pages, where visitors came from, country and type of device. It sets nothing on your device, so it doesn't ask for consent either. In the browsers of our own staff, we set dm.no-ahrefs to leave them out of the count.

Analytics (optional)

Only if you Accept. These tools load after that choice and never before. Some may not be switched on yet, and none ever runs on sign-in, invite or join pages.

Google Analytics 4 counts page views. Google LLC (United States) is the processor. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. Advertising features and Google signals are off.

PostHog (EU Cloud) records page views, clicks and heatmaps, and session replays of how the pages get used. PostHog Inc. is the processor, and the data is kept in the EU. Replays mask everything typed into a form, and stay off your account page, campaigns, tables and token library.

Meta Pixel measures whether our ads bring people to the site. Meta Platforms Ireland Limited is the processor for people in the EEA.

  • _ga and _ga_*: Google, about 2 years. Tell browsers apart and keep session state.
  • ph_*: PostHog cookies and local storage, about 1 year. Hold a visitor id and the session.
  • _fbp and _fbc: Meta, about 3 months. A browser id and an ad click id.

Rejecting means these scripts are never loaded. Going from Accept to Reject stops them and deletes the cookies we can reach. Their own notices: Google, PostHog, Meta, Ahrefs.

Contact

Questions about cookies: info [at] dungeonminion.com.