Settings and data
Game settings, session data and launch secrets have different lifetimes.
Settings
Version your difficulty, volume and visual settings with safe defaults. Never interpret user options as permission to launch or bypass demo restrictions. Read manifest fields without modifying them to control the platform.
Browser storage
localStorage and IndexedDB depend on origin and browser profile. Persistence across Runtime Host updates, profile cleanup or port changes is not guaranteed. Do not describe them as a verified permanent VORIVOX datastore. Storage failures must not start duplicate sessions or lose operator control.
Secrets and results
Keep session_token only in the active client's memory. Never persist the manifest in localStorage, URLs, source files or telemetry. The public SDK does not implement arbitrary disk access to paths. Send final results through session.complete; a local cache is not a replacement for platform result accounting.