TRANSPARENCY
Cookies & device storage
Swarmcore uses essential session storage. Advertising storage is optional and remains disabled unless the required consent is available.
Essential session cookie
__Host-swc_session is a secure, HttpOnly, same-site cookie that links the browser to an anonymous guest or optional Swarm ID. It is required for server-held cosmetics, balances, realtime rooms and account security. Only a hash of its random value is stored on the server. The browser cookie lasts up to 30 days; the server also enforces idle and absolute expiry and may revoke it earlier.
Device-local save
The versioned local-storage key swarmcore:v1 remembers language, sound, reduced motion, visual quality, callsign, tutorial completion and local records. Authoritative paid currency and purchases are never trusted from local storage.
Campaign attribution
If you arrive through a measured DESIGAME social link, source, medium and campaign labels are stored in sessionStorage for the current tab only. This lets aggregate events show whether a visit came from Instagram or TikTok. The labels disappear when the tab session ends and are not linked to a stable advertising identifier.
Checkout storage
If the Prism shop is enabled and you choose to buy, the hosted payment provider may use storage required for security, fraud prevention and completing the transaction under its own notice. No payment provider loads merely by opening the game or shop.
Advertising and consent
When advertising is enabled, Google AdSense may process device identifiers, approximate location derived from an IP address and interaction data to select, measure and protect ads. In the EEA, United Kingdom and Switzerland the advertising tag is enabled only after the operator has published a Google-certified consent message. That message provides the available consent choices and a way to manage them. Until both the consent system and AdSense configuration are marked ready, Swarmcore loads only an empty advertising placeholder and sends no AdSense request.
Your control
Settings → Erase local data clears the device save, not a Swarm ID account. Signing out replaces the local session with a new guest. Browser controls can remove all site storage; do not do so before saving your recovery code if you need to restore an account. Optional advertising choices are controlled through the Google consent message when advertising is active.