Cookie Notice
PetPomo sets one essential login-session cookie, and Google Analytics cookies only if you accept analytics on the banner. No advertising cookies, ever. Here is the full list, so you can check for yourself.
Last updated
Essential: your login session
If you sign in, the login system sets a single strictly-necessary session cookie. It is what keeps you logged in as you move between pages — without it, signing in could not work. It holds only a reference to a session stored on our server, not your details.
- HttpOnly — scripts on the page cannot read it, which limits what a bug could leak.
- Secure — it is only ever sent over an encrypted (HTTPS) connection.
- SameSite — it is not sent along with requests from other sites.
Because it is strictly necessary to a feature you asked for by signing in, no consent is required for it under the GDPR and the ePrivacy rules. Sign out, or never sign in, and it is not set at all.
Analytics: only if you accept
We use Google Analytics to count visits (see the privacy policy). It is off by default: on your first visit a banner asks, and these cookies are set only if you press Accept. Press Decline, or ignore it, and none of them are written. Clearing this site's data resets the choice and removes them.
_ga— Google Analytics' visitor identifier. Expires after ~2 years._ga_Z25JZX5ZPV— Google Analytics 4 session state for this site. Expires after ~2 years.
There are no advertising cookies at all. You can confirm exactly what is set in your browser's developer tools under Application → Cookies.
What it does use: local storage
Local storage holds your game so it is still there when you come back. Unlike cookies it is never transmitted to a server automatically — it stays in your browser until you clear it.
petpomo.save.v1— coins, unlocks, pet mood, settings and session history.petpomo.timer.v1— the current timer, stored as an absolute end time so it survives a refresh.petpomo.lastSeen.v1— when you were last here, to work out how hungry the pet got.petpomo.weather.v1— the last weather reading, cached for 30 minutes to avoid re-asking.petpomo.weather.absent.v1— set only if the weather endpoint is unavailable, so we stop asking.petpomo.syncCode.v1— your sync code, but only if you turned cloud sync on.petpomo.consent.v1— whether you accepted or declined analytics, so the banner is asked once.
Clearing it
Clearing site data for this domain removes all of it and resets the game. There is a reset button inSettings too, along with an export so you can keep a copy first.
Third parties
The only third-party script that can run is Google Analytics, and only after you accept it on the banner (nothing loads before that). There is no ad network, no embedded widgets and no external fonts. The other requests the site makes go to its own endpoints: /api/weather for the sky, /api/sync if you turn cloud sync on, and the sign-in endpoints if you use an account. All are described in theprivacy policy.
One thing worth stating plainly: the Gifts page shows outbound affiliate links to other merchants. PetPomo sets no cookie for these, but the merchant's own site may set cookies once you click through to it — the same as following any link to that shop. That happens on their site, under their policy, not here. The affiliate disclosure covers how those links work.
If advertising is added later it will very likely involve cookies. This page and the privacy policy will be updated first, and a consent banner will be shown where the law requires one.