Cookie Policy
The cookies and browser storage the 41aero website uses. Everything is first-party and needed for the site to work, so there is nothing to opt into.
What cookies are
Cookies are small files a website stores in your browser. Sites can also keep data in your browser's local storage. We use both, but only for things the site needs to work, such as keeping you signed in.
What we don't do
- We don't run analytics, advertising or social media trackers.
- We don't let third parties set cookies on our pages.
- We don't use cookies to follow you across other websites.
Our fonts are hosted on our own servers, so loading a page doesn't contact Google or any other font provider.
Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
session | Keeps you signed in. It holds a signed token with your user ID and username. HTTP-only, so page scripts can't read it. | 7 days, or until you sign out |
onboarding | Remembers which step of registration you're on while you verify your email and finish signing up. HTTP-only. | 1 hour |
discord_oauth_state | Protects the Discord linking flow from forged requests. HTTP-only. | 10 minutes |
sidebar_state | Remembers whether you left the dashboard sidebar open or collapsed. | 7 days |
Local storage
| Key | Purpose |
|---|---|
theme | Remembers whether you chose light, dark or system theme. |
cookie_notice | Remembers that you've dismissed the cookie notice, so it doesn't appear on every page. |
Why the notice has no "reject" button
Each cookie above is either strictly necessary for something you asked for, like signing in or linking Discord, or only remembers a display preference you set yourself. Privacy law doesn't require consent for these, so the notice you see on your first visit just tells you about them and links here. Turning them off wouldn't change anything except stop the site from working. If we ever add cookies that do need consent, we'll ask first, with a real choice, and update this page.
Payments
Payments are handled by [TODO: payment provider]. Our own pages don't load any payment scripts or cookies. When you pay on the provider's checkout page, it may set its own cookies to process the payment and prevent fraud, and its own privacy policy covers those.
Controlling cookies
You can delete or block cookies in your browser settings. If you block the session cookie you won't be able to sign in, but the public pages still work.
More
How we handle the rest of your data is covered in the Privacy Policy. Questions go to privacy@41aero.com.