Only necessary storage
Prototir currently uses first-party cookies and browser storage needed for authentication, security, abuse prevention, requested preferences, and prototype functionality. It does not set advertising, cross-site profiling, or third-party analytics cookies. Because the current cookies are necessary, Prototir explains them but does not ask you to consent to them.
Campaign tags in a link (utm_source and similar) are read from the address of the page
you open and are not stored on this device.
| Name | Purpose | Typical duration |
|---|---|---|
authjs.* | Secure sign-in session, CSRF protection, and return destination. Authentication cookies may use a secure host-prefixed name in production. | Session or up to 30 days |
ptr_did | First-party random device identifier used to deduplicate genuine prototype sessions, enforce rate limits, and reduce manipulation of feedback, points, and rankings. It is not used for advertising. | 1 year |
ptr_cookie_notice | Remembers that the necessary-storage notice was shown so it is not repeated on every visit. | 6 months |
Browser experience local storage
When you use a browser experience that calls Prototir.storage, Prototir stores the
values that prototype requested under keys beginning with ptr:store:. This can hold
progress, settings, or other data described by the prototype. Values are separated by prototype
and, when you are signed in, by account so people sharing one browser do not share saved state.
Anonymous visitors share that browser's anonymous scope. The data remains on the device until
the prototype removes it, you clear it through Privacy choices, or browser storage is cleared.
Prototir limits each prototype-and-player scope to 64 keys and each value to 64 KiB of UTF-8
data.
Native builds use their own local files and may retain a device pairing token. Browser Privacy choices do not erase those files. You can revoke a paired build's access from your account; remove its local data on the device separately.
Screenshot comment drafts
When you capture a screenshot, its image, pin, context and unfinished comment are saved in this
tab's session storage under ptr:review-draft:. This lets you return from sign-in
without losing your work. Drafts expire after two hours, are separated by prototype and account,
and are removed when posted or discarded. Closing the tab clears this storage.
External services
GitHub, Google, or Apple may set their own cookies on their domains only when you choose that sign-in provider. Stripe and Link may do the same when you deliberately open Managed Payments Checkout or Link order management. Their privacy and cookie policies apply on their sites. Prototir does not load those providers merely because you viewed a public page.
Your controls
Use to review this notice or clear the Prototir device identifier, Discover/Create preference, and prototype local storage. Clearing authentication cookies through your browser signs you out. Blocking necessary cookies may stop sign-in, security controls, feedback eligibility, saved prototype progress, or preferences from working.
If optional cookies are added later
Prototir will keep them off by default, explain each purpose, offer equally accessible accept and reject controls, and let you withdraw consent at any time before any optional tracking begins. This approach follows the Italian Data Protection Authority cookie guidelines.