Cookies
Last updated: 23 September 2026
This page lists every cookie Blaze sets, what it is for and how long it lasts. It is part of our Privacy Policy.
The short version
- Blaze sets three cookies in total, and all three are strictly necessary to sign you in and keep you signed in.
- We use no analytics, advertising, profiling or third-party tracking cookies. There is no Google Analytics, Google Tag Manager, Meta pixel or similar anywhere in Blaze.
- Because every cookie we set is strictly necessary, we do not ask for cookie consent and we show no cookie banner. If that ever changes, we will ask before setting anything that needs consent.
- These marketing pages set no cookies at all. You only get a cookie once you sign in.
The cookies we set
| Cookie | Where | What it is for | How long it lasts |
|---|---|---|---|
connect.sid | blaze-bot.net (the Blaze dashboard) | Keeps you signed in after you log in with Discord. It holds nothing but a session identifier; the session itself, including the token that protects against cross-site request forgery, is stored on our server. | Up to 7 days. The session is also ended after 24 hours without activity, and when you log out. |
blaze_hq_session | blaze-hq.net (Blaze HQ, our internal admin) | Keeps a Blaze staff member signed in to Blaze HQ. Customers never receive this cookie. | 8 hours. |
hq_oauth_state | blaze-hq.net (Blaze HQ, our internal admin) | A one-time random value that ties a Discord sign-in to the browser that started it, so someone else cannot complete the sign-in for you. | 10 minutes, and it is deleted the moment the sign-in returns. |
All three are HTTP-only (JavaScript cannot read them), sent only over HTTPS in production, and limited to our own sites with SameSite=Lax.
Cookies other people may set
Our sites are served through Cloudflare, which sits in front of them as a network and security layer (see section 5 of the Privacy Policy). Cloudflare may set its own strictly necessary security cookies, for example __cf_bm, to tell automated traffic from real visitors. We do not read them and we do not use them to recognise you.
If you follow a link from our site to Discord, Stripe or any other service, that service sets its own cookies under its own policy.
Things stored in your browser that are not cookies
The Blaze dashboard remembers a few conveniences in your browser's own storage rather than in a cookie. These never leave your browser and are never sent to us:
- which Discord server you last selected;
- which one-off banners and nudges you have dismissed;
- a referral code you arrived with, until it has been applied;
- the early-access code, while access to blaze-bot.net is limited.
You can clear these at any time from your browser's site data settings; the dashboard simply forgets those preferences.
Controlling cookies
You can block or delete cookies in your browser settings. Blocking the cookies above means you cannot stay signed in to the Blaze dashboard — they are what the login consists of. Nothing else on our sites depends on cookies.
Questions
Write to [email protected].