Cookie Policy

1. What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the site to remember information about your visit — such as whether you are logged in — so you do not have to re-enter it every time you return.

2. How Guild Vault Uses Cookies

Guild Vault uses cookies exclusively for authentication and session management. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

Authentication Cookies

When you sign in to Guild Vault — via email/password or through Discord, Google, or Twitch — our authentication provider (Supabase) sets session cookies that keep you logged in. These cookies are strictly necessary for the Service to function. Without them, you would be unable to access your guild or any authenticated features.

Preference Cookies

Guild Vault stores a small number of UI preferences using your browser's localStorage — for example, whether your sidebar account drawer is open or collapsed. This data is stored locally in your browser only, is never transmitted to our servers, and is not a cookie in the traditional sense.

3. Cookies We Set

The following cookies may be set when you use Guild Vault:

• sb-access-token — Short-lived JWT used to authenticate requests to the Guild Vault backend. Set by Supabase Auth on login. Expires after approximately one hour and is automatically refreshed while your session is active.
• sb-refresh-token — Long-lived token used to silently refresh your access token. Set by Supabase Auth on login. Expires after a longer period (set by Supabase defaults) or when you sign out.
• active_guild_id — Stores the ID of your currently active guild so the correct guild is shown when you have memberships in multiple guilds. This is an httpOnly cookie with a one-year TTL, cleared or updated when you switch or leave a guild.

All cookies set by Guild Vault are httpOnly and Secure where applicable. We do not use cookies for cross-site tracking or advertising.

4. Third-Party Cookies

If you sign in using Discord, Google, or Twitch (OAuth), those providers may set their own cookies as part of their authentication flow. These cookies are governed by the respective provider's privacy and cookie policies:

• Discord — discord.com/privacy
• Google — policies.google.com/privacy
• Twitch — twitch.tv/p/legal/privacy-notice

Guild Vault does not control these third-party cookies and is not responsible for them.

5. What We Do Not Use Cookies For

Guild Vault does not use cookies to:

• Track your activity across other websites
• Serve targeted or behavioural advertising
• Profile you for marketing purposes
• Share your data with advertising networks
• Collect analytics beyond what is necessary to operate the Service

6. Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling or deleting authentication cookies will sign you out of Guild Vault, and the Service will not function correctly without them.

Most browsers allow you to view and manage cookies through their settings or preferences menu. Refer to your browser's documentation for instructions:

• Chrome — Settings → Privacy and Security → Cookies and other site data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Safari — Preferences → Privacy → Manage Website Data
• Edge — Settings → Cookies and site permissions

7. Changes to This Policy

We may update this Cookie Policy if we change how we use cookies. The date at the top of this page reflects when it was last revised. Significant changes will be communicated via the platform.

8. Contact

Questions about this Cookie Policy? Contact us at privacy@guildvault.net.