Consent version: 1.0.0·Re-prompt grace: 30 days
Cookies are small records a site stores in your browser; we also use local storage and similar technologies, and this page treats them the same way. SceneTown sets a small number of them, in four categories. Essential cookies keep you signed in, protect your session and the site against abuse, and cannot be switched off without breaking the site. Preferences remember choices such as your theme and your consent decision. Payment cookies are set by our payment processor only while checkout is loaded, under its own policy. Analytics and marketing technologies load only if you opt in; when a category has none, the table says so. The full inventory is below, generated from the same source the site itself reads, so it cannot drift from what runs.
Your consent decision is recorded in a signed first-party cookie called gm_prefs for one year. When this inventory changes in a way that matters, the consent version below changes and we ask you again within the grace period. You can change your decision at any time from the consent banner, the footer link on every page, or your account settings. How we handle information once it reaches our servers is described in the Privacy Policy, of which this page is part.
Legal basis (EU/UK): Necessary for service (ePrivacy Art. 5(3) exemption + GDPR Art. 6(1)(b)).
| Name | Purpose | Domain | Duration | Required | Withdraw |
|---|---|---|---|---|---|
gm_session | HMAC-signed app session for the authenticated user. | .scenetown.com | 7 days | Required | No |
sessiondeprecated | Legacy session fallback consumed by the edge middleware. | .scenetown.com | 7 days | Optional | No |
privy-session | Privy embedded-wallet session identifier. | .scenetown.com | 30 days | Required | No |
privy-token | Privy short-lived access token. | .scenetown.com | 1 day | Required | No |
privy-id-token | Privy identity token for wallet linking. | .scenetown.com | 1 day | Required | No |
is-admin | Signed admin authorization gate (wallet-verified). | .scenetown.com | 1 day | Conditional | By not using the feature |
investor-session | Investor portal password gate. | .scenetown.com | 1 day | Conditional | By not using the feature |
gm_skin | Remembers which skin a visitor picked on the private-launch home page, so the room they chose survives a reload instead of resetting to the default. Holds one value and one value only: the id of a shipped skin, checked against the built-in registry before it is used. It carries no identity, no account link and nothing about behaviour, and the only thing it can change is the colour of the visitor's own page. | .scenetown.com | 180 days | Optional | By not using the feature |
Legal basis (EU/UK): Consent (GDPR Art. 6(1)(a)).
| Name | Purpose | Domain | Duration | Required | Withdraw |
|---|---|---|---|---|---|
gm_prefs | HMAC-signed snapshot of the user's OS-preferences vector (theme, motion, contrast, save-data, locale, timezone) plus their last authoritative cookie-consent decision. | .scenetown.com | 365 days | Optional | Yes |
Legal basis (EU/UK): Contract necessity when checkout is loaded (GDPR Art. 6(1)(b)).
| Name | Purpose | Domain | Duration | Required | Withdraw |
|---|---|---|---|---|---|
__stripe_midthird-party | Stripe fraud prevention merchant identifier. | stripe.com | 365 days | Conditional | By not using the feature |
__stripe_sidthird-party | Stripe checkout session. | stripe.com | 30 min | Conditional | By not using the feature |
Consent (GDPR Art. 6(1)(a)).
No cookies currently shipped in this category.
Cookies marked third-party in the table are set by a provider we use — today, our payment processor during checkout — under that provider’s own privacy policy and retention, which we do not control. We do not permit advertising networks to set cookies on the Services.
When we add, remove, or materially change a cookie, this page changes with it, the consent version is bumped, and anyone whose recorded decision predates the bump is asked again within the grace period shown at the top. Continued use after you have been asked again and have chosen is acceptance of that choice, not of anything more.
Questions? Contact privacy@scenetown.com. This inventory is rendered from the site’s own consent catalogue on every request; the version and grace period at the top are the values in force. Last updated: September 12, 2026.
We use cookies to keep the site working and, with your consent, to remember your preferences across visits.
AI features may send prompts, chat history, workflow context, and generated outputs to model providers to run the feature. Review AI privacy details.
Details at /cookies.