Cookie Policy
Last updated 12 October 2026
The short version: Loaf only uses cookies to sign you in and keep your account safe. No adverts, no analytics, no tracking.
1. What cookies are
Cookies are small files a website stores in your browser. They let it remember things, like the fact that you're signed in.
2. The cookies Loaf uses
Loaf only uses the cookies it needs to sign you in and keep your account secure:
| Cookie | What it's for | How long it lasts |
|---|---|---|
better-auth.session_token | Keeps you signed in. Without it you'd have to log in on every page. | 7 days, renewed while you use Loaf. Deleted when you log out. |
better-auth.state | Only while you sign in with Discord: checks the sign-in really started on Loaf, which protects your account. | 5 minutes |
better-auth.two_factor | Only while you sign in with two-step sign-in: remembers you've entered your password while you type the code. | 10 minutes |
On the live site their names start with __Secure-, which tells your browser to send them only over a secure connection. They're set for loafsocial.net, so they work on both the website and its server.
3. What Loaf doesn't use
- No advertising cookies.
- No analytics or tracking cookies, and no tracking pixels.
- No cookies from other companies. The Ko-fi button is a plain link: nothing from Ko-fi loads until you click it.
- Loaf doesn't store anything else in your browser (such as "local storage").
5. Controlling cookies
You can delete or block cookies in your browser's settings. If you block Loaf's, you can still look around, but you won't be able to sign in. If we ever want to add a cookie that isn't strictly necessary, we'll ask you first and update this page.
Questions about this page? Email support@loafsocial.net. See also the Terms of Service, Privacy Policy, Cookie Policy and Community Guidelines.