# Cookie Policy

Loaf (Loaf Social). Last updated 12 October 2026.
The current version is always at https://app.loafsocial.net/legal/cookies

The short version: Loaf only uses cookies to sign you in and keep your account safe. No adverts, no analytics, no tracking.

## 1. What cookies are

Cookies are small files a website stores in your browser. They let it remember things, like the fact that you're signed in.

## 2. The cookies Loaf uses

Loaf only uses the cookies it needs to sign you in and keep your account secure:

| Cookie | What it's for | How long it lasts |
|---|---|---|
| `better-auth.session_token` | Keeps you signed in. Without it you'd have to log in on every page. | 7 days, renewed while you use Loaf. Deleted when you log out. |
| `better-auth.state` | Only while you sign in with Discord: checks the sign-in really started on Loaf, which protects your account. | 5 minutes |
| `better-auth.two_factor` | Only while you sign in with two-step sign-in: remembers you've entered your password while you type the code. | 10 minutes |

On the live site their names start with `__Secure-`, which tells your browser to send them only over a secure connection. They're set for loafsocial.net, so they work on both the website and its server.

## 3. What Loaf doesn't use

- No advertising cookies.
- No analytics or tracking cookies, and no tracking pixels.
- No cookies from other companies. The Ko-fi button is a plain link: nothing from Ko-fi loads until you click it.
- Loaf doesn't store anything else in your browser (such as "local storage").

## 4. Why there's no cookie banner

Loaf is based in the United Kingdom, so UK law applies. That law (the Privacy and Electronic Communications Regulations) only requires your permission for cookies that aren't strictly necessary. All of Loaf's cookies are needed for something you've asked for: signing in, and keeping your account secure. So we tell you about them here instead of asking.

## 5. Controlling cookies

You can delete or block cookies in your browser's settings. If you block Loaf's, you can still look around, but you won't be able to sign in. If we ever want to add a cookie that isn't strictly necessary, we'll ask you first and update this page.