Cookie policy
Last updated 30 September 2026
We use two cookies for members, one for our own admin panel, and one piece of browser storage, and each is needed for something someone asked for. There are no analytics, advertising or tracking cookies, and we don't let third parties set cookies through our site.
Everything we store in your browser
| Name | Kind | What it's for | How long |
|---|---|---|---|
st_oauth | Cookie, first-party, HttpOnly | Set when you click Sign in. It proves that the reply coming back from Discord belongs to your browser, so nobody can sign you in to someone else's account. | 10 minutes, deleted after sign-in |
st_session | Cookie, first-party, HttpOnly | Keeps you signed in. It holds your Discord ID, your name and an expiry time, signed so it can't be altered. JavaScript on the page can't read it. | 7 days, or until you sign out |
st_admin | Cookie, first-party, HttpOnly, admin subdomain only | Keeps the operator signed in to the admin panel. Members never get it, and it is never sent to this site. | 12 hours, or until the operator signs out |
soltrack-pending-payment | Local storage, this site only | While you pay, it keeps the invoice number and transaction signature on your device, so you can finish verifying the payment if the page closes. It never leaves your device unless you press Verify payment. | Until the payment is verified |
The support chat stores nothing. The conversation exists only in the open page and disappears when you close it.
Why there's no cookie banner
EU law, and Slovenian law with it, requires your consent before a site stores anything in your browser, except what's strictly necessary to provide a service you've asked for. Everything above is in that exception: without it you couldn't sign in or finish a payment. So there's nothing to ask your consent for.
If we ever want to add something that isn't strictly necessary, such as analytics, we'll ask for your consent first. Nothing will be set until you agree, and this page will list it.
Other companies
- Discord sets its own cookies on discord.com while you sign in there. Its cookie policy covers them.
- Phantom is a browser extension you install. What it stores is between you and Phantom.
- X (Twitter). Profile pictures inside the app load from X's image server. Our site sets no cookie for this, but X receives the request and your IP address.
Your control
You can delete these at any time in your browser's settings. Deleting st_session signs you out, and deleting soltrack-pending-payment means you'd type the invoice number and signature yourself to recover a payment. Blocking cookies entirely stops sign-in from working.
Questions: lickhitter67@gmail.com. For everything else about your data, see the privacy policy.