Last updated
Cookie Policy
Picked.gg sets only the cookies it needs to work. There are no advertising, tracking or third-party analytics cookies, so there is nothing to consent to and no cookie banner.
Cookies we set
All of them come from signing in with Discord. A visitor who never signs in gets none.
- next-auth.session-token — keeps you signed in. Lasts 30 days from your last visit.
- next-auth.csrf-token — prevents forged requests. Deleted when you close your browser.
- next-auth.callback-url — returns you to the page you were on after signing in. Deleted when you close your browser.
- next-auth.state — secures the Discord sign-in. Lasts 15 minutes.
On the live site these names carry a __Secure- or __Host- prefix, which tells the browser to send them over HTTPS only.
Other data stored in your browser
- theme (local storage) — whether you chose the dark or light theme.
- dbl-auth (local storage) — whether you were signed in last time, so the header does not flicker while the page loads. It is not sent to the server and grants no access.
Analytics
Page views are counted with Umami, which sets no cookies and stores no personal data. See our Privacy Policy.
Managing cookies
You can delete or block cookies in your browser settings. If you block them you cannot sign in; the rest of the site still works. When we add a cookie we update this page. Questions: [email protected].