Use of Cookies

Cookies are small text files placed on your device by a website. This page explains the cookies and browser storage entries used by our website so you can make informed choices about your privacy. This page forms part of our Privacy Policy.

We set only a small number of first-party cookies for essential functionality — sign-in and security. We do not use advertising, marketing, or cross-site tracking cookies.

session_token (essential)

A signed session token that keeps you signed in after you log in with Discord. It is stored as an HttpOnly cookie and expires after 7 days. If you delete it, you will be signed out.

discord_oauth_state (essential)

A short-lived security token used during the Discord sign-in flow to prevent cross-site request forgery. It is stored as an HttpOnly cookie and expires after 15 minutes.

coi_admin_token (essential — staff only)

A signed token used to maintain the administrator session. It is set only for authorised staff members who use the admin panel, is stored as an HttpOnly cookie, and expires after 12 hours.

In addition to cookies, the website uses small amounts of browser storage to remember your preferences and the state of certain pages. This data stays on your own device and is not sent to any tracking service.

localStorage

• coi_show_financials — remembers whether your money and gold are visible on public directories.
• coi_public_profile — remembers whether your profile is public or private.
• coi_rules_read_33 — remembers that you have read and accepted the server rules, so you are not asked repeatedly.

sessionStorage

• coi_whitelist_eval — temporarily holds the outcome of your whitelist evaluation for the current browser session.

To display typography and icons, the website loads assets from Google Fonts and a Font Awesome content-delivery network. When you visit the site, your browser may contact these providers to fetch the resources, and they may set their own cookies or collect standard request information. We do not control these providers' cookies. You can review their respective policies:

• Google Fonts: https://policies.google.com/privacy
• Font Awesome: https://fontawesome.com/privacy

You can control and delete cookies through your browser settings. Most browsers allow you to view the cookies set by a site, block them, or delete them when you close the browser. Because our cookies are essential to sign-in, blocking them may prevent you from signing in or using the dashboard.

If you have questions about our use of cookies or browser storage, contact us at indiana.rdrrp@gmail.com or through a ticket in the official City of Indiana Discord server.