file 03 / 04 · legal register

Cookie Policy.

doc/cookieslast updated 2026-10-03lang en

1. Our Approach

Argos uses strictly necessary cookies, functional storage that remembers your preferences, and optional analytics cookies that run only after your consent. You can accept or reject analytics from the cookie banner shown on your first visit.

2. Cookies We Use

  • __Secure-authjs.session-token — the session token. Created when you sign in with Discord; carries who you are and your tier. It lives for 30 minutes, after which you sign in again. httpOnly + secure, so JavaScript cannot read it and it only travels over HTTPS.
  • __Host-authjs.csrf-token — CSRF protection. Confirms a sign-in request genuinely came from your browser. Lasts for the session, httpOnly + secure.
  • __Secure-authjs.callback-url — remembers which page to return you to after sign-in. Lasts for the session.
  • lang — language preference (tr or en). Written only when you use the language switch, kept for 1 year. Not httpOnly, because the interface itself reads it. It contains no identifying information.
  • _ga and _ga_VF98Y1MVER — set by Google Analytics only after you grant analytics consent, to distinguish visitors and persist session state. Their default lifetime is up to 2 years; browsers may enforce a shorter period.

3. Optional Analytics

Google Analytics loads only after you accept it. It measures usage data such as page path and title, referrer, device/browser information, session statistics and approximate region. Discord IDs, email addresses, queried identities and query results are not sent to Analytics. Advertising personalisation and Google signals are disabled.

4. Third Parties

The site is served behind Cloudflare, which may set its own security cookie (e.g. cf_clearance) when it issues a challenge. That cookie exists for attack filtering and is not read by us. Sign-in uses Discord OAuth: cookies on discord.com are governed by Discord’s own policy and are not set on our domain. We never see your Discord password. When you grant analytics consent, Google Analytics processes usage measurements through Google’s infrastructure.

5. Browser Storage

Not a cookie, but the same idea: the panel keeps the IDs you looked up most recently in your browser’s localStorage for quick access. That data never leaves your device, is never sent to the server, and is removed when you clear your browser data.

6. Managing Cookies

You can accept or reject analytics from the cookie banner. Your choice is stored in localStorage; clearing this site’s browser data presents the choice again. Blocking the session cookie prevents sign-in. Rejecting analytics cookies does not affect any site feature.

end of recorddoc/cookies