Cookie Policy

1. Introduction

This Cookie Policy explains how Aerra Flow e. U. ("we," "us," or "our") uses cookies and similar technologies when you visit our websites and use our services. This policy should be read alongside our Privacy Policy.

2. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help websites function properly and provide information to website owners about how their site is being used.

2.1 Types of Cookies

• Session Cookies: Temporary cookies deleted when you close your browser
• Persistent Cookies: Remain on your device for a set period or until manually deleted
• First-party Cookies: Set by our website directly
• Third-party Cookies: Set by external services (we use very few of these)

3. How We Use Cookies

3.1 Essential Cookies (Always Active)

These cookies are necessary for the website to function and cannot be switched off. They are usually only set in response to actions made by you.

3.2 Analytics Cookies (Privacy-Focused)

Self-hosted Analytics: We use privacy-focused, self-hosted analytics (Plausible) that does not share data with third parties or transfer data outside the EU.

3.3 Functional Cookies

These cookies enable enhanced functionality and personalization:

• Gaming Progress: Storing XP, levels, achievement data, Aerra Silver/Aerra Gold
• Account Management: Managing account types (Unclaimed, Standard, Verified, Professional)
• UI Preferences: Theme settings, language preferences, display options
• Forum Settings: Display preferences and notification settings

3.4 Performance Cookies

These cookies help us improve website performance:

• Error Tracking: Identifying and fixing technical issues
• Performance Monitoring: Page load times and optimization
• A/B Testing: Testing different features and layouts

4. Cookie Categories and Details

4.1 Strictly Necessary Cookies

Cookie Name	Purpose	Duration
aerraflow_session	Authentication and session management	Session
csrf_token	Security protection against CSRF attacks	Session
user_preferences	Storing user settings and preferences	1 year

4.2 Analytics Cookies (Self-hosted)

Cookie Name	Purpose	Duration
plausible_session	Privacy-focused analytics (no personal data)	24 hours

5. Third-Party Services

5.1 Steam Integration

When you connect your Steam account, Steam may set their own cookies. These are governed by Steam's privacy policy and cookie practices, not ours.

5.2 External Links

Our website may contain links to external websites. We are not responsible for the cookie practices of external sites. Please check their cookie policies.

6. Your Cookie Choices

6.1 Browser Settings

You can control cookies through your browser settings:

• Block All Cookies: Prevent all cookies from being set
• Block Third-party Cookies: Allow only first-party cookies
• Delete Cookies: Remove existing cookies from your device
• Notify Before Setting: Get alerts when cookies are set

6.2 Browser-Specific Instructions

6.3 Impact of Blocking Cookies

Blocking certain cookies may affect your experience:

• Essential Cookies: Website may not function properly
• Analytics Cookies: No impact on functionality
• Functional Cookies: Some features may not work correctly
• T0 Accounts: Progress may not be saved without session cookies

7. Data Storage and Transfer

7.1 Data Location

• Cookie data is primarily stored and processed within the EU
• Our analytics are self-hosted on EU servers
• No data is transferred to third-party analytics companies
• Steam integration may involve data transfer to Steam's servers

7.2 Data Retention

• Session Cookies: Deleted when browser is closed
• Analytics Data: Aggregated data retained for 12 months
• Functional Cookies: Retained until manually deleted or expired
• Preference Cookies: Retained for 1 year or until changed

8. Security Measures

We implement security measures to protect cookie data:

• Secure Flag: Cookies transmitted only over HTTPS
• HttpOnly Flag: Cookies inaccessible to client-side scripts
• SameSite Attribute: Protection against CSRF attacks
• Encryption: Sensitive cookie data is encrypted
• Regular Updates: Security practices are regularly reviewed

9. Children's Privacy

Our services are not directed at children under 14 (Austrian digital consent age). We do not knowingly collect cookie data from children under 14. Parents should monitor their children's internet usage and cookie settings.

Purchase Restrictions: Any purchases involving real money require users to be 18+ or have valid parental consent.

10. Changes to This Policy

We may update this Cookie Policy to reflect:

• Changes in our cookie practices
• New features or services
• Legal or regulatory requirements
• Improvements in privacy protection

We will notify users of material changes by:

• Updating the "Last Updated" date
• Posting notice on our website
• Sending email notifications for significant changes

11. Your Rights Under GDPR

You have the following rights regarding cookie data:

• Right to Information: Understanding what cookies we use
• Right to Access: Requesting information about stored cookies
• Right to Deletion: Requesting deletion of cookie data
• Right to Object: Objecting to non-essential cookies
• Right to Withdraw Consent: Changing your cookie preferences

12. Technical Information

12.1 Cookie Technology Alternatives

Besides cookies, we may use similar technologies:

• Local Storage: For T0 session data and preferences
• Session Storage: Temporary data during your visit
• IndexedDB: For complex gaming data storage
• Web Beacons: Small tracking pixels for analytics

12.2 Mobile and App Considerations

If you access our services through mobile browsers or apps:

• Standard cookie controls apply
• Some mobile browsers have additional privacy settings
• App-specific data storage may be used
• Device settings may affect cookie behavior

13. International Users

13.1 EU/EEA Users

For users in the European Union and European Economic Area:

• GDPR provides additional protection for your cookie data
• Consent mechanisms comply with ePrivacy Directive
• You can withdraw consent at any time
• Data processing is based on legitimate interest or consent

13.2 Other Jurisdictions

Users from other countries receive the same level of protection as EU users, following the highest privacy standards regardless of location.

14. Contact Us

For questions about our use of cookies or to exercise your rights:

15. Additional Resources

For more information about cookies and privacy:

• Austrian Data Protection Authority: dsb.gv.at
• European Data Protection Board: edpb.europa.eu
• About Cookies: aboutcookies.org
• Your Online Choices: youronlinechoices.eu