Cookie Policy
AlbionCore uses the smallest possible set of cookies and browser-storage keys needed to run. We do not use advertising cookies, cross-site trackers, or third-party marketing pixels. Strictly necessary items load automatically; analytics is loaded only after you opt in via the consent banner.
What we use
Authentication (JWT)
Essential CookieKeeps you signed in after Discord OAuth. Set as an HTTP-only, secure cookie in production. Without it you cannot use the dashboard.
Retention: Session / until expiry or sign-out
Security & CSRF
Essential CookieProtects authenticated requests against cross-site request forgery and supports basic abuse-prevention.
Retention: Session
albioncore.consent / ac_consent
Essential localStorage + cookieRemembers whether you accepted or declined the analytics banner, so we don't ask again on every visit. Mirrored to a first-party cookie on .albioncore.com so your choice is honoured on both the site and the app (app.albioncore.com) without asking twice.
Retention: Until you clear it (cookie: up to 12 months)
albioncore.telemetry_session
Analytics localStorageA random 16-character id used to de-duplicate funnel events across page loads. Only written if you accept the analytics banner. No third-party trackers, no advertising profiles.
Retention: Until you withdraw consent / clear it
Managing your choices
You can decline analytics from the consent banner, and
withdraw consent at any time by clearing localStorage["albioncore.consent"] in your browser (a one-click toggle on the Profile page is
planned). You can also block or delete cookies in your
browser settings, but disabling the essential
authentication cookie will sign you out and prevent the
dashboard from working. See our Privacy Policy for how the resulting data is handled.