Cookie Policy

Last updated: 1 September 2026

What we use

This Service uses the essential rc_session cookie to keep you signed in. When you use Discord authentication it temporarily uses rc_discord_oauth to validate the redirect and rc_discord_ticket to finish first-time profile setup. These cookies are:

• HttpOnly — not readable by scripts;
• SameSite=Lax — not sent with cross-site requests;
• set to expire after 30 days for the session, 10 minutes for OAuth state, or 15 minutes for first-login completion;
• marked Secure when the Service is served over HTTPS.

What we do not use

• No advertising cookies.
• No analytics or tracking cookies.
• No third-party cookies.

Managing cookies

You can log out to end your session immediately, or delete cookies in your browser settings. Without the session cookie you will not stay signed in; the rest of the Service still works.

Changes

If this Cookie Policy changes, the updated version will appear on this page with its date.