What we use
| Name | Purpose | Lifetime |
|---|---|---|
| __Secure-next-auth.session-token | Authenticated session (Discord OAuth via NextAuth). | 30 days, sliding |
| next-auth.csrf-token | CSRF protection during sign-in. | Session |
| __cf_bm | Cloudflare bot management — set by our edge proxy. | 30 minutes |
What we don't use
- No marketing or retargeting cookies (no Meta Pixel, no Google Ads, etc.).
- No third-party analytics (no Google Analytics, no Hotjar, no Plausible third-party).
- No cross-site tracking pixels.
Local storage
We use small amounts of localStorage in the User Control Panel to remember UI preferences (sidebar collapse state, theme). No personal data.
Manage cookies
You can clear cookies for zonexworld.com in your browser at any time. Doing so will sign you out of the User Control Panel. Authentication will not work if you block first-party cookies.