The cookie jar
A cookie is a small note a website asks your browser to keep. We use one, we name it, and we show it working. That is the lesson.
The live jar
This list comes from this site, not from a tracker. HttpOnly cookies cannot be read by page scripts — so this page asks the server whether the notebook is here, instead of peeking.
What the words mean
First-party. Only daily.vialfall.win wrote this note. A third-party cookie is a note from some other company, often used to follow you across the web. We set none of those.
HttpOnly. JavaScript on this page cannot read vf_notebook. If a borrowed script ran here, it still could not steal the notebook.
Secure. On https the browser will not send the cookie over plain http.
SameSite=Lax. Other sites cannot quietly attach your notebook to a hidden request.
Signed. The cookie holds a random id, a created time, and a signature. If someone edits it, the site rejects it. Your display name and scores are not inside the cookie. They live in the server book keyed by that id.
What we do not do
No advertising cookies. No analytics pixels. No email. No account password. The iPhone game on vialfall.win still uses no cookies at all — its save stays on the phone.