sinaro_cp_session
Up to 2 hoursKeeps your session across pages and lets you remain signed in to the control panel. The value is protected and cannot be read by JavaScript.
Technical cookie, HttpOnly, Secure, SameSite=Lax.
Cookies and browser data
Last updated: 13 September 2026
This page lists the technical cookies and data that SinaRO CP stores in your browser to maintain your session, protect requests and remember your preferences. We do not use profiling or advertising cookies.
Technical and security services
Panel session, CSRF protection and Cloudflare Turnstile abuse prevention. They are required for web features and security.
Local preferences
Theme, language, game settings and other preferences stay in your browser.
External resources
The panel uses Font Awesome and Cropper.js from cdnjs and Cloudflare Turnstile for protected forms. Landing-page fonts are hosted directly by SinaRO.
Control panel HTTP cookies
These are set by the Laravel server when you visit the CP. They are not used for advertising or profiling.
XSRF-TOKEN
Up to 2 hoursHelps protect panel forms and requests from unauthorized cross-site requests.
Technical security cookie, Secure, SameSite=Lax.
Control panel local storage
These are not cookies: they stay in your browser and are not automatically sent to the server. They store interface preferences and conveniences.
cookie_consent
Remembers that you have already dismissed the cookie information banner.
theme
Remembers your light or dark theme choice.
tab
Remembers the selected tab on some control panel pages.
sinaro_chatbot_history / sinaro_chatbot_input_history
Keep the displayed chatbot conversation and recent questions locally so they can be restored after navigation or a refresh.
sinaro_chatbot_conversation_key / sinaro_chatbot_open / sinaro_chatbot_pending_id / sinaro_chatbot_unread / sinaro_chatbot_unread_preview
Keep the chat context, widget state, unread preview and any request currently in progress.
sinaro.poll.completed.*
Remembers polls already completed in that browser so they are not shown again.
sinaro.game-events.suppress-next-access
Remembers the choice to hide a specific event window at the next game access.
sinaro.classes.* / sinaro.server-transfer.equipment.v1
Keeps filters, views and temporary control-panel selections locally.
rocp-gm-char-id / rocp-gm-dividers / ai-events-prompt-draft
Stores some administrative-area preferences, dividers and drafts locally; these are not needed by ordinary users.
sinaro.shop.view.v2 / sinaro.shop.cart.v1 / sinaro.build-draft.* / sinaro-maintenance-high-score
Temporarily stores the selected shop view, the shop cart, drafts for some tools and the maintenance mini-game score.
sinaro.play.client.settings / sinaro.pwa.audio / sinaro.fullscreen.dismissed
Remembers game launch settings, the audio preference and the choice not to show a technical notice again.
sinaro.sso.recovery
Temporarily stores technical context in the client to complete or recover a game SSO login; it contains session-flow data and is used only during the login flow.
sinaro_social_token / sinaro_social_upload_url / sinaro_social_logo_url
Stores temporary technical data in the client to upload a screenshot to the site’s social service and apply its branding. These are not advertising preferences and are used only during the upload flow.
Game client local storage
The roBrowser client does not set application cookies. It uses localStorage and sessionStorage for game preferences and, in some flows, temporary technical data for login or uploads. It also uses Cache Storage/service worker for some technical resources. These data are not used for advertising or profiling.
robrowser.lang
The language selected in the client and the preference used to load localized assets.
Camera / Map / Audio / Controls / UI / Graphics
Camera zoom, map effects, volume, controls, interface and graphics quality.
ShortCutControls and window preferences
Keys, positions/sizes of windows and panels, inventory, chat, minimap, quest and other interface preferences.
HOM_AGGRESSIVE / MER_AGGRESSIVE
Local preferences for homunculus and mercenary automatic behavior.
Service worker Cache Storage
May keep local copies of static assets to speed up game loading; it is not a cookie and does not contain your password. Temporary technical keys used by SSO or screenshot uploads are described above and are not permanent preferences.
External resources
The CP loads Font Awesome and, on pages with an image editor, Cropper.js from cdnjs; protected forms use Cloudflare Turnstile. Cinzel and Nunito Sans for the landing pages are now hosted directly by SinaRO, so those pages no longer request Google Fonts. cdnjs and Turnstile may receive technical request data under their own policies. The game primarily uses SinaRO-configured assets and services.
Cloudflare Turnstile
When executed to protect a submission, Turnstile sends technical request data and interaction signals to Cloudflare for verification. The token lasts only as long as needed for verification and is not stored by the CP. For details, see Cloudflare’s Privacy Policy and Terms of Service.
Managing or deleting local data
You can delete cookies and local storage from your browser settings. If you delete sinaro_cp_session you will need to sign in again; if you delete local preferences, the CP or client will return to its defaults.
For information about account, gameplay, IP and access-token data, see the Privacy Policy.