Cookie Policy

better-auth.session_token (prefixed with __Secure- over HTTPS in production) — your sign-in session; 7-day sliding lifetime; HttpOnly; cleared on sign-out.

_medusa_locale — remembers the interface language you picked; 1 year; not HttpOnly (the UI reads it).

_medusa_cache_id — partitions the page cache so visitors never see each other's cached pages; 1 day; HttpOnly.

_consent — remembers your choice in the consent banner (accept all / essential only); 6 months; not HttpOnly (the UI reads it).

Local storage: a dismissal flag for the trial banner. It contains no identifiers.

No ad networks, no social-platform pixels, no cross-site identifiers, and no third-party web analytics.

If privacy-friendly analytics is ever enabled, we will update this policy first and ask for your consent where required before writing any related cookie.

While the consent banner is up, nothing beyond the strictly necessary cookies above is written; usage statistics (not enabled today) only load after you choose "Accept all".

The payment pages you are redirected to (PayPal, epay/Alipay) and the Discord sign-in redirect set their own cookies under their own cookie policies, disclosed by them when you land there.

You can view and delete cookies in your browser settings. Blocking the strictly necessary ones breaks sign-in, the cart and language preferences — they cannot be switched off from this site.

Anything else: email [email protected].

You can review and change your current choice at the bottom of this page; the banner comes back when you do.