Cookies and local storage

This page lists the cookies our sites set and the small values they keep in your browser, and what each one is for. It is part of our Privacy Policy

1. Cookies

We use strictly essential cookies only. Two of them are set the first time you load any page, signed in or not, because our sign-in system checks for a session on every page:

• __Host-authjs.csrf-token, which protects forms against cross-site request forgery;
• __Secure-authjs.callback-url, which holds the address on this site that a sign-in or sign-out should return you to

When you actually sign in:

• a session cookie, a signed token that keeps you signed in, refreshed to 24 hours on each visit;
• while you sign in with Google, Discord or GitHub, a few short-lived functional cookies (one-time PKCE, state and nonce values) that make the redirect secure and are discarded once sign-in finishes

All of these are first-party and HTTP-only. There are no advertising cookies and no cookies that track you across other sites. Our analytics are cookieless, as the Privacy Policy explains. Because every cookie above is strictly necessary to provide a service you asked for and to keep it secure, and the analytics set no cookie at all, the site does not show a cookie consent banner. If you block these cookies you will not be able to sign in or stay signed in

These cookies belong to visionforceofficial.com alone and are not shared with create.visionforceofficial.com or meridian.visionforceofficial.com. That is why the creator application form lives on visionforceofficial.com: it is the only place your sign-in can be seen

2. Stored on your device, not sent to us

The site also saves a few small values in your browser's own storage. These never reach our servers, and apart from the button that replays the homepage intro, which clears the intro flags below, nothing on the site deletes them, so clearing your browser data is how you remove them:

• your 3D scene quality choice on the homepage, and whether you declined the prompt offering a lighter mode
• whether the homepage music is muted
• recently used colour swatches
• whether the roadmap shows its item labels written out in full
• whether an admin sidebar group is open, for staff
• a flag set the first time you pass the hub's entry screen, so the one-off welcome is not shown again
• a flag set once the intro has played, so it is not played again
• per tab, and cleared when you close it: that you dismissed the entry screen, and that the intro countdown already played
• per tab, and cleared when you close it: on the community page, when that page last asked our server to look for new relayed announcements, so an open page asks at most once every two minutes. The ask itself carries nothing about you
• per tab, and cleared when you close it: on the status page's staff screen, the staff key that unlocks it, for staff

The Rocket Racing Archive sets no cookies at all. It stores four values in your browser: a short hash of its notice text so its card does not reappear once dismissed, the time of your last contribution so the form can ask you to wait, whether its intro animation has already played for you, and whether you muted that section's sound

The status page sets no cookies of its own

3. Read from your device, not stored on it

Some features read details from your browser without saving anything in it. What we keep from them is described in the Privacy Policy:

• The device fingerprint, while you are signed in and using the community hub: your browser's User-Agent, platform, languages, screen size and colour depth, time zone, device memory and CPU core count, and a small canvas drawing, combined into a one-way hash
• The entry scan, while it is switched on: an invisible test element that shows whether an ad blocker is running, and your browser's time zone
• The send button on our application forms: your browser's time zone name and your device's clock time

4. The Meridian launcher

Meridian is a Windows program rather than a website, so it keeps its settings, your launcher key and some logs in folders on your computer instead of in a browser. The Project Overdrive access terms list exactly what it keeps and where