Cookie Policy
Understand how we use cookies and similar technologies to run Catcord.
This document is provided in English. The German version is legally binding where applicable.
1. Essential cookies
Session cookies keep you logged in with Discord, secure the checkout flow, and deliver fraud prevention signals. Catcord sets these server-side cookies as HttpOnly, SameSite=Lax, and Secure when served over HTTPS.
Session data minimization: the signed session cookie stores only the fields required for security and account continuity. Current fields are discord_id (authenticated account binding), oauth_authenticated_at (fresh-login checks for sensitive exports), account_csrf_token (CSRF protection for state-changing requests), discord_oauth_state and discord_oauth_state_ts (short-lived OAuth anti-replay state), and locale (in-session language preference when preference cookies are not available). Catcord intentionally does not duplicate derived authorization flags in session payload.
2. Preference cookies
We store your cookie consent decision and optional locale preference for 365 days so you don’t need to repeat the same choices on every visit. These preference cookies use SameSite=Lax and are marked Secure in HTTPS contexts. They stay JavaScript-readable because consent management and locale updates happen in the browser.
3. Analytics cookies
Catcord does not currently use analytics cookies or third-party tracking. If we introduce analytics in the future, we will request your consent before any non-essential cookies are set.
4. Managing consent
You can adjust your preferences at any time using the “Manage preferences” button in our cookie banner or the “Cookie settings” link in the footer. We store the same consent payload in a browser cookie and in local storage to rehydrate your choice if one storage source is unavailable. If you reject preference cookies, Catcord immediately clears the locale cookie.
5. Third-party cookies
Stripe may set additional cookies or similar technologies when you complete a payment. These are governed by Stripe’s own privacy policy and are required for secure payment processing.
6. Updates
This cookie policy was last updated on 23 February 2026.