This Cookie Policy explains how Hostd uses cookies and similar local-storage technologies when you visit https://hostdservers.com or use the dashboard. The cookies we set to sign you in and protect your session are strictly necessary. We do not set advertising or behavioural-tracking cookies and we do not load third-party tracking scripts. We do operate our own first-party analytics, described in section 4; it is optional and only runs after you choose "Allow analytics" in the cookie banner.
1. What Cookies Are
Cookies are small text files stored on your device by your browser when you visit a site. They let the site remember information between requests, such as that you are signed in. Local storage and session storage are similar mechanisms accessible to client-side JavaScript.
2. Cookies We Set
| Name | Purpose | Lifetime | Category |
|---|---|---|---|
accessToken | Keeps you signed in for the current session. | 15 minutes | Strictly necessary |
refreshToken | Lets you stay signed in across sessions without re-entering your password. | 7 days | Strictly necessary |
csrfToken | Protects dashboard requests against cross-site request forgery. | 7 days | Strictly necessary |
3. Local Storage and Session Storage
| Key | Purpose | Lifetime |
|---|---|---|
| Sign-in session and dashboard preferences | Caches your profile so the dashboard renders without a flash of unauthenticated content; stores small preferences like display currency and dismissed banners; remembers a referral code you arrived with so it can be applied at checkout; lets the file manager resume large uploads after a network interruption. Cleared on sign-out or when you clear browser storage. | Until sign-out / cleared |
| Analytics session keys | A random per-tab identifier and a last-activity timestamp that group pageviews from the same browsing session. Stored in sessionStorage only; not a tracking cookie. Only set when you have allowed optional analytics. | Tab close or 30 minutes idle |
| Consent choice | Remembers whether you have accepted or declined optional analytics so we do not show the banner again. | 12 months |
4. Hostd Analytics (Cookieless)
We operate our own first-party analytics, called Hostd Analytics, on the marketing pages of https://hostdservers.com. It does not set any cookie, does not write any persistent identifier to your device, and does not fingerprint your browser. The script that records events is served from our own infrastructure at /api/t/track.js and posts events to /api/t/e on the same domain; nothing is sent to any third party.
For each pageview we briefly use your IP address to count you as a unique visitor for that day and to look up your approximate country. We do not store the IP address itself. The daily counting key rotates and is deleted soon after so past visits cannot be linked back to you. Raw analytics rows are kept for up to 90 days and then deleted; only aggregated daily totals are kept beyond that.
We respect Do Not Track (navigator.doNotTrack) and Global Privacy Control: if either is set, the tracker does not run at all on your visit. You can also block requests to /api/t/* in your browser, or send a request to privacy@hostdservers.com asking us to exclude further visits from the same source. Because the analytics is anonymous and aggregated we cannot retroactively identify or remove past rows for you, but no row contains personal data within the meaning of UK / EU GDPR.
5. Third-Party Cookies
We do not set advertising or analytics cookies, and we do not embed third-party tracking scripts on our marketing pages. When you make a payment we redirect to or embed Stripe's checkout, which sets its own cookies solely to process the transaction and to detect fraud. Those cookies are governed by the Stripe cookie policy. If you choose to link your Discord account, Discord may set its own cookies during the OAuth redirect, governed by the Discord cookie policy.
6. Managing Cookies
Because the cookies we set are strictly necessary for authentication and security, disabling them will prevent you from signing in to the dashboard. Your browser settings let you block or delete cookies and clear local storage at any time; please refer to your browser's documentation. You can also sign out from the dashboard at any time, which clears the authentication cookies and the cached profile in local storage.
7. Do Not Track and Global Privacy Control
We do not use behavioural advertising or cross-context tracking. Hostd Analytics, described in section 4, also honours Do Not Track and Global Privacy Control: if either signal is present the tracker does not load and no analytics row is recorded for your visit.
8. Changes
We will update this page if our use of cookies or local storage changes. The "Effective" date at the top of this page reflects the latest revision.
9. Contact
Questions about cookies: privacy@hostdservers.com.