Cookie Policy

Overview

Flaux uses necessary first party cookies for login, OAuth security, safe redirects and saving privacy choices, and one optional first party analytics cookie that is only ever created after you allow analytics.

No third party analytics or marketing provider is used. Analytics events are sent to a Flaux operated endpoint and stored in the same MongoDB database Flaux already uses, not to an outside company.

Necessary Cookies

Necessary cookies keep the dashboard secure and working. They are not optional because login, authorization and privacy preference storage depend on them.

• flaux_session: Flaux, necessary, 7 days, first party, .flauxbot.com in production, otherwise current host. Purpose: Keeps a signed dashboard session after Discord OAuth login.
• flaux_oauth_state: Flaux, necessary, 10 minutes, first party, .flauxbot.com in production, otherwise current host. Purpose: Protects the Discord OAuth login flow against request forgery.
• flaux_post_login_redirect: Flaux, necessary, 10 minutes, first party, .flauxbot.com in production, otherwise current host. Purpose: Stores a safe destination while the user completes Discord OAuth login.
• flaux_consent: Flaux, necessary, 6 months, first party, .flauxbot.com in production, otherwise current host. Purpose: Stores the user's cookie and privacy choices.
• flaux_aid: Flaux, analytics, 180 days, first party, .flauxbot.com in production, otherwise current host. Purpose: A random anonymous identifier used to group page views and product events for internal analytics. Not a Discord user ID, and not readable by page scripts.

Analytics And Marketing

Analytics is optional and off by default. It only starts after you choose Allow analytics or check the Analytics box and choose Save choices in Cookie settings. Before that choice, no analytics script runs, no analytics cookie exists and no page view or event is sent.

When allowed, Flaux records the page or dashboard section viewed, a small set of product events such as Chat Reward created or Automation paused, a coarse device category, the referring site's hostname, and the anonymous flaux_aid cookie value. It does not record your name, Discord user ID, server ID, IP address, or the content of any message, Chat Reward, or automation.

Analytics records are kept for 180 days and then deleted automatically. Rejecting or later revoking analytics stops new events immediately and removes the flaux_aid cookie; it does not retroactively delete already stored anonymous rows.

Marketing cookies are not listed because Flaux does not use a marketing or advertising tracking provider.

Consent Storage

The flaux_consent cookie stores the consent version, policy version, timestamp, expiry date and accepted categories. It does not store a Discord user ID or server ID.

The consent cookie is readable by client code so the website can reopen and update privacy choices.

Changing Your Choice

Use the Cookie settings link in the footer to reopen preferences. Rejecting non essential cookies keeps optional categories disabled. Withdrawing analytics consent stops future optional tracking and clears known Flaux optional tracking state where possible.