Cookie Policy for Diski
Last updated: October 10, 2026
Diski uses only the cookies it needs to sign you in to the dashboard and keep you signed in. We don't use analytics, advertising or tracking cookies, and we don't sell or share cookie data.
What are Cookies?
Cookies are small text files a website stores in your browser. Diski's cookies are first-party: they are set by diski.xyz and only sent to Diski.
The Cookies We Set
- access_token: keeps you signed in to the dashboard. Your browser's scripts can't read it, and it lasts 30 days unless you log out.
- logged_in: tells the dashboard you're signed in so it can show the right pages. It holds no personal data and lasts 30 days.
- oauth_state: protects the Discord sign-in step against forged requests. It lasts 10 minutes.
- login_return: remembers which page to take you back to after you sign in. It lasts 10 minutes.
Logging out deletes these cookies and ends your session on every device.
Settings Saved in Your Browser
The dashboard keeps a few small preferences in your browser's local storage, for example that you closed a banner. They stay on your device and are never sent to us.
Other Services
- Discord: you sign in on discord.com, under Discord's own cookie policy.
- Stripe: when you open checkout or change your card, Stripe's payment form sets its own cookies to process the payment and prevent fraud. If you have an older PayPal subscription and manage it on paypal.com, PayPal sets its own cookies there.
- Cloudflare: our site sits behind Cloudflare, which may set a short-lived security cookie to block bots and attacks.
- Fonts and styles: the dashboard loads fonts from Google Fonts and styles from a public CDN. These requests don't set cookies.
Managing Cookies
You can block or delete cookies in your browser settings. If you block the access_token cookie, you won't be able to sign in to the dashboard. The bot itself works in Discord without any cookies.
Updates to This Policy
If we change how we use cookies, we'll update this page and the date at the top.