Last updated: October 6, 2026
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and improve your browsing experience. This policy explains how Boxity, formerly known as Bloxity (“bloxity.io”, the “Platform”) uses cookies and similar technologies, and which third-party services may set their own cookies while you use the Platform.
These cookies are set by the Platform itself. “Session” means the cookie is deleted when you close your browser.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| __Host-bloxity_session | Essential | Keeps you signed in to your Boxity player, including a guest player. Page scripts cannot read it. | 12 months |
| __Secure-next-auth.session-token | Essential | Keeps you signed in to your Boxity account. Large values are split into numbered parts (for example .0 and .1). | 30 days, renewed while you use the Platform |
| __Host-next-auth.csrf-token | Essential | Protects sign-in requests against cross-site request forgery. | Session |
| __Secure-next-auth.callback-url | Essential | Returns you to the page you were on after you sign in. | Session |
| __Secure-next-auth.state | Essential | Secures sign-in with Discord by checking that the response matches the sign-in you started. | 15 minutes |
| bloxity_popup_provider_sign_in | Essential | Remembers that a sign-in started in a pop-up window so it finishes correctly. | 5 minutes |
| bloxity_boot_attempt | Essential | Counts attempts to start your player session so a failed attempt cannot redirect you in a loop. | 10 minutes |
| bloxity_api_route | Essential | Load balancing. Keeps your requests to our API on the same server. | 1 hour |
| bloxity_media_route | Essential | Load balancing for avatar images and the skin maker. | Session |
| googtrans | Functional | Stores the language the Platform is translated into. Until you choose a language, we may set it from the country you visit from. | 12 months |
| bx_lang_set | Functional | Remembers that you chose a language yourself, so we stop choosing one for you. | 12 months |
The services below load on parts of the Platform and may set their own cookies. Those cookies are controlled by each provider, and their names and durations are set by the provider and may change. Please see each provider's privacy or cookie policy for details.
| Service | Type | Where it loads | Purpose |
|---|---|---|---|
| Google Analytics | Analytics | Most pages, except the sign-in and registration pages | Measures visits and how pages are used. Sets _ga and _ga_<ID>, which hold a random identifier and last up to 2 years. |
| AdinPlay and its advertising partners | Advertising | Pages that show ads, such as game pages | Delivers and measures ads, limits how often you see the same ad, and prevents ad fraud. Depending on your location and settings, ads may be personalized. |
| Google Translate | Functional | Every page | Provides the language selector and translates the Platform into your chosen language. |
| YouTube | Embedded content | Game pages that include a video | Plays the embedded video. YouTube may set cookies when the video player loads. |
| Cloudflare Turnstile | Essential | Sign-up, sign-in and password reset forms | Checks that a real person, not an automated program, is using the form. |
| Google, Apple, Microsoft (via Firebase) and Discord | Essential | Only when you choose to sign in with one of these providers | Signs you in with your account at that provider. |
| CrazyGames | Varies | Only when you play Boxity on CrazyGames | Runs the CrazyGames platform features, including its own ads and sign-in. |
These cookies are necessary for the Platform to function. They enable sign-in, security, and load balancing. The Platform cannot operate properly without them.
These cookies remember your choices, such as the language the Platform is shown in.
These cookies help us understand how the Platform is used, such as which pages are visited and for how long. They use a pseudonymous identifier rather than your name or account details.
These cookies are set by our advertising partners to deliver and measure ads, limit repetition, and prevent fraud. Depending on your location and settings, they may also be used to show ads based on your interests.
Content from other websites, such as YouTube videos, behaves as if you visited that website and may set its own cookies.
In addition to cookies, we use browser local storage, session storage, and IndexedDB for features like remembering UI preferences (such as dark mode), caching data for performance, keeping track of how often ads are shown, keeping you signed in when you use Google, Apple, or Microsoft sign-in, and maintaining real-time connection state. Guest account data is stored on Boxity's servers; legacy guest display and avatar values may be read once from local storage while older browsers migrate to the server-backed guest system. These storage mechanisms are not cookies but serve similar purposes and are governed by this policy.
You can control cookies through your browser settings. Most browsers allow you to:
You can also opt out of Google Analytics on all websites with the Google Analytics Opt-out Browser Add-on.
Blocking essential cookies will prevent you from signing in and using core Platform features. Blocking analytics, advertising, or embedded-content cookies does not stop you from playing.
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of the Platform after changes constitutes acceptance.
If you have questions about our use of cookies, contact us at [email protected].