Cookie Policy — Nimbus

01What we use

The dashboard uses the following sign-in storage and connection preferences:

Storage	Purpose	Lifetime
nimbus_session cookie	httpOnly cookie set by the API after Discord login. Authenticates your requests. Not readable by scripts.	One day, or 30 days with "Stay signed in"; cleared on logout
nimbus.session	Sign-in token used where the cookie can't be. Kept in sessionStorage, or in localStorage only if you tick "Stay signed in".	Until the browser closes, or up to 30 days with "Stay signed in"; cleared on logout
nimbus_oauth_state cookie	HttpOnly, Secure, SameSite=Lax cookie on the bot sign-in origin tying the Discord return to the starting browser.	Ten minutes; cleared on successful sign-in
Local storage preferences	nimbus.remember (your "Stay signed in" choice), nimbus.apiBaseUrl, nimbus.apiDirect and nimbus.demoMode (connection and demo choices).	Until cleared; logout removes direct/demo choices

All of this is strictly necessary to sign you in or to remember a choice you made. None of it is used for tracking or advertising.

02Why there is no consent banner

Norwegian and EU rules on cookies and similar storage require consent for cookies except those strictly necessary to deliver a service you explicitly asked for. Everything listed above falls under that exception, so there is nothing for you to accept or decline.

Nimbus has no analytics, advertising pixels or third-party trackers. If we ever add optional storage, we will ask first with a clear "Accept" and "Reject" choice of equal weight.

03Third parties

Fonts are served from this website; the page does not request them from Google.
Discord sets its own cookies during the OAuth login redirect, on Discord's domain, under Discord's privacy policy. We neither set nor read them.

04Managing cookies

You can block or delete cookies in your browser settings. Blocking the session cookie will sign you out. Clearing site data removes the saved sign-in too, and logging out ends the session on our side.

Not using "Stay signed in" means the sign-in token disappears when you close the browser.

05Changes and contact

Any change to what we store appears on this page with a new date. Questions: [email protected].