1. Scope and responsibility
This Policy explains device storage and access across the www, apex and play Gina Heartwing websites operated by HEARTWING MEDIA LTD. It covers cookies, local storage, session storage, cached data and similar technologies, not only files labelled cookies. The Privacy Policy explains associated personal-data processing. Contact privacy@ginaheartwing.com with questions.
2. How storage works
Cookies can accompany browser requests to a domain. Local storage normally remains in the browser until removed and has no automatic expiry unless the application implements one. Session storage is generally limited to a browser-tab session. Game data can also be held on our servers, which is different from browser storage. “First party” describes who places or controls a technology and does not automatically make it necessary or exempt from consent.
The www and play subdomains are different browser origins. A local-storage choice made on one is not automatically available to the other. Any consent-sharing mechanism must be explicitly designed, documented and secure; absence of a choice must not be interpreted as consent. Deleting local storage does not necessarily delete server-side account information.
3. Categories and choices
Strictly necessary storage is limited to what is essential to transmit a communication or provide a service you expressly request, such as a secure sign-in or a requested save function. We explain it even where optional consent is not required. Optional preferences, analytics, advertising and embedded-media tracking require the relevant consent where applicable. A storage operation is not exempt simply because it improves the experience.
Where optional storage is offered, the relevant notice explains the choice. Optional storage requiring consent must remain off until valid permission is given. Closing a banner, scrolling or continued browsing does not count as consent. Refusing optional storage must not block ordinary access to features that do not depend on it. We do not ask for an “Accept all” permission for unspecified future technologies.
4. Storage used by the websites
| Identifier | Provider / scope | Purpose and duration |
|---|---|---|
ginaCookieConsentV1 | Heartwing; local storage on the www origin. | Records the current banner choice. This record persists until cleared. Necessary to remember the choice, not permission for unidentified trackers. |
ginaSound, ginaMusic25, ginaBookVoice101 | Heartwing; play-site sound preference keys. | Sound and narration preferences. These settings support the sound or narration choice you request. Browser-held preferences can remain until changed or cleared. |
Keys beginning gina, heartwing or wonder | Heartwing; play-site gameplay data. | Signed-in play can synchronise game data with the selected account profile. Guest progress may remain on the device. Saved data can remain in browser storage until removed; account copies are subject to the Privacy Policy. |
| Sign-in and session identifiers | Heartwing account services on the play website | Authenticate and protect the requested session. Parent sign-in may persist for up to 90 days without use; signing out ends the relevant active session. Staff sessions follow separate security limits. |
hwWebStorageNoticeR4 | Heartwing; play-origin local storage. | Remembers acknowledgement of the main play homepage storage notice. It does not grant optional tracking consent. The acknowledgement is renewed after 180 days; the stored record remains until replaced or cleared. It is separate from game-save and child-profile keys. |
Different activities use different storage keys. The categories above explain their purposes; a game-specific identifier may vary between versions. Payment services identify their relevant storage and privacy information when used.
5. Changing or withdrawing a choice
You may change a choice using the relevant consent control where offered, or contact privacy@ginaheartwing.com to withdraw an optional permission. You can remove the stored banner choice through your browser’s site-data controls and make a new choice when the banner appears. Withdrawal does not affect the lawfulness of prior processing. Necessary choice records may be kept to honour and demonstrate your decision. Browser settings can also block or remove storage, but may sign you out or remove unsynchronised guest progress. Export or synchronise wanted progress first where that facility is available.
6. Children and external services
Optional tracking decisions for child use must follow the applicable parental-consent and child-privacy rules. An adult’s optional marketing choice must not automatically switch on tracking for a child profile. Loading an embedded third-party service can transmit an IP address or set storage before a person clicks it; where consent is required, loading must wait. Necessary payment processing should be limited to the checkout purpose and not used as a blanket analytics exemption.
7. Updates
We update the inventory and obtain fresh consent where required before introducing a new optional purpose or provider. Existing consent is not treated as agreement to unrelated future tracking. The relevant version, purpose and choice must be recorded so that the permission can be demonstrated.