Cookie Policy

1. What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the site to remember information about your visit — such as whether you are logged in — so you do not have to re-enter it every time you return.

2. How Guild Vault Uses Cookies

Guild Vault uses essential cookies for authentication and session management. We may also use analytics cookies or similar local storage only if you choose to allow optional analytics, to understand how the Service is used and improve it. We do not use cookies for cross-site behavioral advertising.

Authentication Cookies

When you sign in to Guild Vault — via email/password or through Discord, Google, or Twitch — our authentication provider (Supabase) sets session cookies that keep you logged in. These cookies are strictly necessary for the Service to function. Without them, you would be unable to access your guild or any authenticated features.

Analytics and performance measurement

We use Vercel to host the Service and may use its privacy-focused analytics and performance tools. If you choose to allow optional analytics, PostHog may store a pseudonymous identifier in browser storage or cookies and receive page-view and product-interaction events. We use this information to understand which parts of the Service are useful and to improve reliability and conversion flows. The same choice also enables aggregate live presence for the site operator: counts by safe page label, device category, sign-in state, and active/idle state. Session recording is limited to signup, authentication, and setup routes; our configuration masks form inputs.

Preference Cookies

Guild Vault stores a small number of UI preferences using your browser's localStorage — for example, whether your sidebar account drawer is open or collapsed. This data is stored locally in your browser only, is never transmitted to our servers, and is not a cookie in the traditional sense.

3. Cookies We Set

The following cookies may be set when you use Guild Vault:

• PostHog identifiers — Only if you allow analytics, PostHog may set pseudonymous identifiers in cookies or localStorage to associate analytics events with a browser session. These are not used for cross-site behavioral advertising.
• sb-access-token — Short-lived JWT used to authenticate requests to the Guild Vault backend. Set by Supabase Auth on login. Expires after approximately one hour and is automatically refreshed while your session is active.
• sb-refresh-token — Long-lived token used to silently refresh your access token. Set by Supabase Auth on login. Expires after a longer period (set by Supabase defaults) or when you sign out.
• active_guild_id — Stores the ID of your currently active guild so the correct guild is shown when you have memberships in multiple guilds. This is an httpOnly cookie with a one-year TTL, cleared or updated when you switch or leave a guild.

Authentication cookies are httpOnly and Secure where applicable. Analytics identifiers may be stored in browser-accessible cookies or localStorage. We do not use cookies for cross-site behavioral advertising.

4. Third-Party Cookies

If you sign in using Discord, Google, or Twitch (OAuth), or link Battle.net from your profile, those providers may set their own cookies as part of their authentication or linking flow. These cookies are governed by the respective provider's privacy and cookie policies:

• Discord — discord.com/privacy
• Battle.net — blizzard.com/legal
• Google — policies.google.com/privacy
• Twitch — twitch.tv/p/legal/privacy-notice

Guild Vault does not control these third-party cookies and is not responsible for them.

5. What We Do Not Use Cookies For

Guild Vault does not use cookies to:

• Track your activity across other websites
• Serve targeted or behavioural advertising
• Profile you for marketing purposes
• Share your data with advertising networks
• Use analytics information for cross-site behavioral advertising

6. Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling or deleting authentication cookies will sign you out of Guild Vault, and the Service will not function correctly without them.

Most browsers allow you to view and manage cookies through their settings or preferences menu. Refer to your browser's documentation for instructions:

• Chrome — Settings → Privacy and Security → Cookies and other site data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Safari — Preferences → Privacy → Manage Website Data
• Edge — Settings → Cookies and site permissions

You can also change your optional analytics choice here. Declining analytics does not affect essential login or service cookies.

7. Changes to This Policy

We may update this Cookie Policy if we change how we use cookies. The date at the top of this page reflects when it was last revised. Significant changes will be communicated via the platform.

8. Contact

Questions about this Cookie Policy? Contact us at privacy@guildvault.net.