Cookie Policy
Draft. This text describes how VV-Bot is designed to work. It has not yet been reviewed by a lawyer and some features it mentions are still being built. It will be reviewed and updated before the service opens to the public.
We use one strictly necessary session cookie, and nothing else. We run no analytics and no third-party trackers, so there is no cookie banner: there is nothing for you to accept or refuse.
Cookies we set
| Name | Purpose | Set when | Lifetime |
|---|---|---|---|
vv_session |
Keeps you signed in to the dashboard. It holds a random identifier and nothing else. Your details are kept on our server, not in the cookie. | After you sign in with Discord. | Ends after 2 hours without activity, or 12 hours in total, or when you sign out. |
vv_oauth |
Protects the Discord sign-in step against forged requests. It holds a signed one-time value. | When you start signing in. | 10 minutes, and removed as soon as sign-in finishes. |
Both cookies are HttpOnly (scripts cannot read them), SameSite=Lax, and marked Secure on https. They are strictly necessary for the sign-in you asked for, which is why no consent is needed to set them.
What we do not do
- No analytics or statistics services.
- No advertising or marketing cookies.
- No third-party cookies, embeds, fonts or scripts. Everything on this site is served from our own domain.
- No cookies at all on the public pages if you have not signed in.
Removing cookies
Use "Sign out" on the dashboard, or clear this site's cookies in your browser settings. You will be asked to sign in again next time.
If we ever add anything that needs your consent, this page and the site will change first, and we will ask before setting anything.
More about the data we hold is in the Privacy Policy.