Cookie settings

Ubitscord.ai uses a small number of first-party cookies, almost all of them needed to sign you in securely. Your choices here apply to this browser. The full policy is in Part B of our Privacy Notice & Cookie Policy.

Your choices

Strictly necessary

Always on

Keep you signed in, protect forms against cross-site request forgery, and secure the Discord sign-in and bot install flows. The site cannot work without them, so they do not need consent.

Preferences

Remember the light or dark theme you pick. Nothing is stored until you choose a theme. Turn this off and the theme still switches, but resets when you leave.

Analytics and advertising

Not used

We set no analytics, tracking or advertising cookies, and load no third-party trackers. If that changes, they will appear here, off until you turn them on.

What we store

On a local development server the three sign-in cookies drop the __Host- prefix, because browsers only allow it over HTTPS.

NamePurposeDurationCategory
__Host-dai_session
Cookie, first party
Keeps you signed in. Holds a random token; we store only its hash. HTTP-only, so page scripts cannot read it, and locked to this exact host.Until sign-out, 7 days unused, or 30 days at mostNecessary
__Host-dai_csrf
Cookie, first party
Protects signed-in actions against cross-site request forgery. Sent back with each change you make.Same as the sessionNecessary
__Host-dai_oauth_state
Cookie, first party
Links the Discord sign-in you started to the one that returns, blocking forged sign-in attempts.10 minutesNecessary
__Host-dai_install_state
Cookie, first party
Does the same for adding the bot to a Discord server.10 minutesNecessary
ubitscord-cookie-preferences
Local storage
Remembers the choice you make on this page, so a refusal is respected on your next visit.Until you clear site dataNecessary
ubitscord-theme
Cookie and local storage, first party
Remembers the light, dark or system theme you pick, so pages load in it without a flash. Only set after you choose.1 yearPreferences

Third parties

Cloudflare Turnstile. The report form uses Cloudflare's verification check to keep automated abuse out. It loads only on that page, runs in a Cloudflare frame, and processes browser and device signals to tell people from bots. See Cloudflare's Turnstile privacy addendum.

Discord and Stripe. Signing in with Discord or paying through Stripe takes you to their sites, where their own cookie policies apply. Discord avatars are loaded from Discord's image servers, which do not set cookies on this site.

Browser controls

You can also block or delete cookies in your browser settings. Blocking the necessary cookies will stop you signing in and using your dashboard, though public pages will still work.

Questions about cookies: [email protected].