Session and security cookies
Security/session cookies use HttpOnly where appropriate, SameSite protections, and Secure on HTTPS. Sessions may expire or be revoked before a cookie’s maximum lifetime.
- tn_guest: player session, up to 8 hours.
- tn_org and tn_admin: host/owner sessions, up to 12 hours.
- tn_trusted_org and tn_trusted_admin: trusted-device safety cookies, up to 30 days. These support checks and do not replace sign-in.
- tn_device: a random browser identifier, up to one year, for reconnecting a game registration. It is not a hardware ID or cross-site fingerprint.
- tn_display: recognizes a paired or reusable display, up to one year. It can be replaced when the display resets or disconnects.
Preferences and pairing
Local storage remembers your player name and dashboard theme. A pending display-pairing token may be held in local/session storage for up to 15 minutes to finish linking after sign-in. Expired pending pairing data is cleared when checked.
Other preferences remain until cleared or replaced. They are not used to follow you around other websites.
Your controls
Delete cookies and site storage through browser settings. This may sign you out, reset preferences, disconnect a screen, or stop score reconnection. Blocking essential storage can prevent core features.
Cloudflare handles network security. If a security challenge sets necessary cookies, those follow its service behavior. Lulu has no optional advertising-cookie banner because it currently uses no optional advertising or analytics trackers.