Cookie Policy
There is no cookie banner on dreaded.lol because there is nothing to consent to. We set no advertising cookies, no analytics cookies and no third-party trackers. Every cookie below is strictly necessary for something you asked the site to do.
1. What a cookie is here
A cookie is a small piece of text your browser stores for a site and sends back on each request. We use them only to keep you signed in, to stop other sites forging requests as you, and to remember that you already unlocked a protected page. None of them contain your email, your password, or anything about you as a person.
2. The cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
d_session | Keeps you signed in. It holds an opaque random token, not your identity — the token is matched against a hashed copy on our side. HttpOnly, Secure, SameSite=Lax, so scripts cannot read it. | 30 days, or until you sign out |
d_csrf | Blocks cross-site request forgery. Every write compares this cookie against a header sent by our own pages, so another site cannot act as you. | Session |
d_unlock_… | Set only when you enter the password for a protected page, so you do not have to type it again on every visit. One per page, named after the page. | 12 hours |
d_theme | Remembers a preference you set in the editor, such as a collapsed panel. Never sent anywhere. | 1 year |
3. Storage that is not a cookie
A profile page may use your browser's local storage to remember that you already dismissed a splash screen or confirmed an age gate, so it does not ask again. That data stays in your browser and is never sent to us.
When someone opens a page we also issue a short-lived signed token to check the visit is a real person rather than a script. It is tied to the page render rather than to you, it is not a cookie, and it expires within the hour. There is more about that in section 7 of our privacy policy.
4. What we do not set
- No advertising or retargeting cookies.
- No third-party analytics. We count page views ourselves and never share them.
- No social media pixels or embedded tracking scripts.
- No cross-site profiling of any kind.
- No fingerprinting for advertising purposes.
5. Cookies on pages other people made
A profile can embed things from other services — a music player, a Discord widget, an image hosted elsewhere. Those services may set their own cookies once their content loads, and we do not control them. If that matters to you, a content blocker will stop them without breaking the rest of the page.
6. Turning them off
Every browser lets you block or delete cookies. Blocking ours will stop you signing in and will make protected pages ask for their password on every visit, but nothing else on the site depends on them.
7. Changes
If we ever add a cookie that is not strictly necessary, we will ask for your consent before setting it and update this page first. We will not quietly add tracking.
8. Contact
Questions go to privacy@dreaded.lol, which reaches the privacy team at Starlight Solutions, Inc..