Cookie Policy
Last updated: 27 July 2026
This page lists everything CapitalsQuiz stores on your device. The short version: one cookie, a handful of local storage keys, and the session your browser keeps when you sign in. All of it is needed to run the site — to keep you signed in, to count your free games and to take a payment.
There is nothing here to opt out of. We load no advertising scripts, no third-party analytics, no tag manager and no social widgets, and we do not sell or share what we store. That is also why the notice at the bottom of the page has one button and no choices: there is no optional tracking to switch off. If that ever changes, the notice will change with it and you will be asked before anything optional is set.
What is stored on your device
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
cq_device | Cookie | CapitalsQuiz | A random id for this browser, created only when you ask for a sign-in link by email. It lets the abuse limit on that form keep working when your IP address changes. It is not linked to your account and is not used to profile you. | 400 days |
cq_daily_games | Local storage | CapitalsQuiz | How many of the five free games you have played today. | Until you clear your browser storage |
cq_daily_played | Local storage | CapitalsQuiz | Whether you have already played today’s daily challenge. | Until you clear your browser storage |
cq_user | Local storage | CapitalsQuiz | Your account id, email and display name, so the header can show you as signed in on the first paint instead of flashing a Log in button. | Until you sign out |
cq_premium_until, cq_entitlement, cq_premium_synced | Local storage | CapitalsQuiz | Your subscription state — plan, source and expiry — and when it was last checked, so premium modes open without a round trip on every page. | Until you sign out |
cq_email_for_signin | Local storage | CapitalsQuiz | The address you asked a sign-in link for, so opening the link on the same device needs no retyping. | Until the sign-in completes |
cq_link_cooldown_until | Local storage | CapitalsQuiz | When you may request another sign-in link, so the button can count down. | 60 seconds |
cq_consent_ack | Local storage | CapitalsQuiz | That you have seen the cookie notice, so it is not shown again. | Until you clear your browser storage |
cq_auth_intent, cq_pending_email_link, cq_checkout_done | Session storage | CapitalsQuiz | What you were doing when you were sent to a sign-in or payment page, so you come back to it instead of starting over. | Until the browser tab is closed |
firebase:authUser:…, firebaseLocalStorageDb | Local storage + IndexedDB | Google (Firebase Authentication) | Your signed-in session and its refresh token. Written by the Firebase Authentication SDK, which is loaded only after you choose to log in or subscribe — never on an ordinary page view. | Until you sign out |
Cookies set somewhere else
Paying and signing in take you to pages we do not serve, and those pages set their own cookies under their own policies:
- Stripe — checkout and the billing portal run on
checkout.stripe.comandbilling.stripe.com. We load no Stripe script on this site. See Stripe’s privacy policy. - Google — signing in with Google happens on Google’s own pages. See Google’s privacy policy.
Measurement without cookies
We do count things — a game started, a game finished, a paywall seen, a checkout opened — but the counter is ours, runs on our own domain, and stores nothing on your device and no identifier of any kind. Each event carries the event name, the quiz mode, the page path and the two-letter country Cloudflare reports for the request. There is no cookie, no device id, no IP address kept, and no way to join two events back into one person.
Turning it off
Your browser can clear or block all of it, from its settings for this site. Blocking storage will log you out and reset your daily game counter, because that is where those live; nothing else on the site depends on it.
Questions
IT Nest Limited operates CapitalsQuiz. Write to [email protected] — see also our Privacy Policy.