Cookie Policy
Two strictly necessary cookies, both for signing in. No advertising and no analytics of any kind.
1The short version
Mamori sets two cookies. Both are strictly necessary, both exist only for signing in to the dashboard, and both are first party.
There is no advertising cookie, no analytics cookie, no tracking pixel, no session recording and no third party script anywhere on the site. Nothing counts your page views.
Because both cookies are strictly necessary for a service you asked for, no consent banner is required and none is shown.
2mamori_session
Set when you sign in with Discord.
- Purpose: keeps you signed in to the dashboard.
- Contents: a random session id and an HMAC-SHA256 signature. No name, no Discord token, nothing that identifies you off Discord.
- Expiry: 7 days. After that the session is invalid and the stored record is removed.
- Flags: HttpOnly, Secure, SameSite=Lax, path /.
3mamori_state
Set for a few seconds while you are being redirected to Discord and back.
- Purpose: protects the Discord sign-in redirect against cross-site request forgery.
- Contents: a random value and its signature.
- Expiry: 10 minutes, and it is deleted the moment you return from Discord.
- Flags: HttpOnly, Secure, SameSite=Lax, path /.
4What we do not use
None of the following exists on this site.
- analytics, page view counting or session replay
- advertising, retargeting or conversion cookies
- tag managers, third party fonts or embedded widgets
- local storage, session storage or browser fingerprinting
5Requests to other domains
The site loads its own styles inline and fetches nothing from another domain, with one exception: on the dashboard, member and server avatars are loaded from Discord's content network. Those are plain images. They set no cookie for us and we receive nothing back from them.
6Server logs
Cloudflare records standard request information such as IP address, timestamp, path and user agent, for security and reliability. That is a server log rather than a cookie, and it is not used to follow you around the internet.
7Turning cookies off
You can block or delete cookies in your browser. If you block ours, signing in will not work, because there is no other way for the site to recognise your session.
The bot itself needs no cookies at all. Everything inside Discord keeps working.
8Changes and contact
If we ever add a cookie, this page changes before it ships. Questions go through a ticket in the support server.