1.SummaryAktualisiert
- Kovu uses a small number of cookies to sign you in, keep the site secure and remember your choices.
- Google Analytics counts which pages and features get used. There are no advertising, cross-site tracking or social media cookies.
- In the EU, EEA, UK and Switzerland, or if we can’t tell your country, Google Analytics stays off until you turn it on. Elsewhere it’s on from your first page view, with a notice and a one-click way to turn it off.
- Preference cookies stay off until you turn them on, and you can change your mind at any time.
- We don’t sell or share personal information. When your browser sends Global Privacy Control, Google Analytics never loads.
2.What cookies areAktualisiert
Cookies are small text files a website stores in your browser. This policy also covers similar technology such as local storage. Kovu doesn’t use tracking pixels. Two things are kept in your browser’s storage rather than a cookie: the status page’s theme setting, listed under strictly necessary, and the dashboard’s recent search results, listed under preferences. Google Analytics, when you allow it, uses only the cookies listed below.
3.Strictly necessary cookiesAktualisiert
These make the site work: signing in, security and remembering your cookie choices. They’re exempt from consent under EU and UK law because Kovu can’t provide the service you asked for without them, so they can’t be switched off here. You can still block them in your browser, but signing in to the dashboard will stop working.
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| __Secure-kovu.session_token | Keeps you signed in to the dashboard after you log in with Discord. | 30 days | Kovu |
| __Secure-kovu.session_data | A short-lived, signed copy of your session so pages load without a database lookup. | 5 minutes | Kovu |
| __Secure-kovu.state | Protects the Discord sign-in flow from forged requests. Only set while you sign in. | 5 minutes | Kovu |
| __Host-kovu_vb | Only on server verification pages (/verify). A random, signed ID that helps server staff spot the same browser verifying several accounts. It isn’t used anywhere else. | 12 months | Kovu |
| kovu-consent | Remembers your cookie choices, including turning Analytics off, so we don’t ask on every visit. Shared across kovu.gg: kovu.gg’s banner and the status page’s notice both set it, and one choice covers both sites. | 12 months | Kovu |
| __cf_bm, _cfuvid, cf_clearance | Set by Cloudflare, which hosts Kovu, to tell people from bots, apply rate limits and remember a passed security check. | 30 minutes to 1 year, depending on the cookie | Cloudflare |
__Secure-kovu.session_token
- Purpose
- Keeps you signed in to the dashboard after you log in with Discord.
- Lasts
- 30 days
- Set by
- Kovu
__Secure-kovu.session_data
- Purpose
- A short-lived, signed copy of your session so pages load without a database lookup.
- Lasts
- 5 minutes
- Set by
- Kovu
__Secure-kovu.state
- Purpose
- Protects the Discord sign-in flow from forged requests. Only set while you sign in.
- Lasts
- 5 minutes
- Set by
- Kovu
__Host-kovu_vb
- Purpose
- Only on server verification pages (/verify). A random, signed ID that helps server staff spot the same browser verifying several accounts. It isn’t used anywhere else.
- Lasts
- 12 months
- Set by
- Kovu
kovu-consent
- Purpose
- Remembers your cookie choices, including turning Analytics off, so we don’t ask on every visit. Shared across kovu.gg: kovu.gg’s banner and the status page’s notice both set it, and one choice covers both sites.
- Lasts
- 12 months
- Set by
- Kovu
__cf_bm, _cfuvid, cf_clearance
- Purpose
- Set by Cloudflare, which hosts Kovu, to tell people from bots, apply rate limits and remember a passed security check.
- Lasts
- 30 minutes to 1 year, depending on the cookie
- Set by
- Cloudflare
The status page also remembers a theme you pick with its theme button, in your browser’s local storage rather than a cookie:
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| kovu-status-theme | Only on status.kovu.gg, and only after you use its theme button: remembers dark or light. It stays in your browser and is never sent to us. Choosing the system theme removes it. | Until you clear it or pick the system theme | Kovu |
kovu-status-theme
- Purpose
- Only on status.kovu.gg, and only after you use its theme button: remembers dark or light. It stays in your browser and is never sent to us. Choosing the system theme removes it.
- Lasts
- Until you clear it or pick the system theme
- Set by
- Kovu
4.Preference cookies (optional)Aktualisiert
Only used if you allow the Preferences category.
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| kovu-theme | Remembers dark, light or system theme. Without consent it’s kept only until you close the browser. | 12 months with consent, otherwise the browser session | Kovu |
| kovu-locale | Remembers which of Kovu’s 9 languages you picked. Shared across kovu.gg, so the language menu on either the website or status.kovu.gg sets it for both. Without consent it’s kept only until you close the browser. | 12 months with consent, otherwise the browser session | Kovu |
kovu-theme
- Purpose
- Remembers dark, light or system theme. Without consent it’s kept only until you close the browser.
- Lasts
- 12 months with consent, otherwise the browser session
- Set by
- Kovu
kovu-locale
- Purpose
- Remembers which of Kovu’s 9 languages you picked. Shared across kovu.gg, so the language menu on either the website or status.kovu.gg sets it for both. Without consent it’s kept only until you close the browser.
- Lasts
- 12 months with consent, otherwise the browser session
- Set by
- Kovu
Dashboard search also remembers what you opened from it, in your browser’s storage rather than a cookie. Without the Preferences category it forgets when you close the browser:
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| kovu:search-recent:<your Discord ID> | Dashboard search: the pages, settings and items you opened from it recently, so it can offer them again. Only their IDs, never what you typed. It stays in your browser and is never sent to us. Without consent it’s kept in session storage until you close the browser. | Until you clear it with consent, otherwise the browser session | Kovu |
kovu:search-recent:<your Discord ID>
- Purpose
- Dashboard search: the pages, settings and items you opened from it recently, so it can offer them again. Only their IDs, never what you typed. It stays in your browser and is never sent to us. Without consent it’s kept in session storage until you close the browser.
- Lasts
- Until you clear it with consent, otherwise the browser session
- Set by
- Kovu
5.Analytics cookies (optional)Aktualisiert
When these are used depends on where you are:
- In the EU, EEA, UK and Switzerland, or if we can’t tell your country: only after you allow the Analytics category. Nothing loads before that.
- Everywhere else: from your first page view, with a notice that says so and a one-click way to turn Analytics off. You can also turn it off at any time in cookie settings.
- Anywhere: never while your browser sends a Global Privacy Control signal, and never after you turned Analytics off.
Kovu uses Google Analytics to learn which pages and dashboard features get used. It sees page paths with server and member IDs removed (for example /dashboard/:guild/levels) and events like “turned a module on”, never your Discord ID, server names or messages. Only analytics storage is used: advertising storage, Google signals and advertising features are off. More in the Privacy Policy.
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| _ga | Google Analytics: a random ID that tells visits from the same browser apart, so we can count people rather than page loads. It isn’t linked to your Discord account. | 13 months | |
| _ga_X4RJ3MS9SW | Google Analytics: keeps the pages of one visit together. | 13 months |
_ga
- Purpose
- Google Analytics: a random ID that tells visits from the same browser apart, so we can count people rather than page loads. It isn’t linked to your Discord account.
- Lasts
- 13 months
- Set by
_ga_X4RJ3MS9SW
- Purpose
- Google Analytics: keeps the pages of one visit together.
- Lasts
- 13 months
- Set by
The status page, status.kovu.gg, follows the same rules and can set the same cookies there. It sends Google Analytics only a page view and whether you expanded an incident.
Turning Analytics off stops Google Analytics straight away and deletes these cookies. If you turn it off on one site while the other is open in another tab, that tab stops it and deletes its cookies the next time you switch to it. Kovu doesn’t use advertising cookies.
6.The Kovu team’s console (admin.kovu.gg)Aktualisiert
admin.kovu.gg is the internal console the Kovu team uses to run Kovu. Only Kovu team members can sign in, and it sets cookies only for them, on admin.kovu.gg alone. It loads no analytics, and your choices in cookie settings don’t apply there.
| Cookie | Purpose | Lasts | Set by |
|---|---|---|---|
| __Host-kovu-admin-session | Keeps a Kovu team member signed in to the console. Only on admin.kovu.gg. | 12 hours | Kovu |
| __Host-kovu-admin-oauth-state | Protects the console’s Discord sign-in from forged requests. Only set while a team member signs in. | 5 minutes | Kovu |
| kovu-admin-theme | Remembers the dark, light or system theme a team member picked for the console. | 12 months | Kovu |
__Host-kovu-admin-session
- Purpose
- Keeps a Kovu team member signed in to the console. Only on admin.kovu.gg.
- Lasts
- 12 hours
- Set by
- Kovu
__Host-kovu-admin-oauth-state
- Purpose
- Protects the console’s Discord sign-in from forged requests. Only set while a team member signs in.
- Lasts
- 5 minutes
- Set by
- Kovu
kovu-admin-theme
- Purpose
- Remembers the dark, light or system theme a team member picked for the console.
- Lasts
- 12 months
- Set by
- Kovu
7.Third-party servicesAktualisiert
- Cloudflare hosts Kovu and may set the security cookies listed above. On server verification pages it also runs Turnstile, a privacy-preserving check that doesn’t use cookies to track you.
- Google provides Google Analytics, under the rules in Analytics cookies.
- Discord. When you sign in, you’re sent to discord.com, where Discord’s own cookie policy applies. Avatars and server icons load from Discord’s image servers without cookies from Kovu.
8.Your choicesAktualisiert
Change or withdraw consent, or turn Analytics off, at any time. It takes effect straight away and doesn’t affect anything done before.
Your choice covers kovu.gg and status.kovu.gg. The status page has no full banner. Outside the EU, EEA, UK and Switzerland it shows a short notice instead, with “Turn off analytics” and “OK”, which saves the same choice as kovu.gg. In those countries it waits for a choice made on kovu.gg. Under Global Privacy Control it shows nothing, since Analytics stays off. Its “Cookie settings” link brings you to kovu.gg to change your choice.
You can also delete or block cookies in your browser settings. Your choices are stored for 12 months, after which we ask again. We also ask again if this policy changes in a way that affects them.
9.California residentsAktualisiert
Under the California Consumer Privacy Act (as amended by the CPRA), you can opt out of the sale or sharing of your personal information. Kovu doesn’t sell or share personal information, or use it for cross-context behavioral advertising, and hasn’t done so in the last 12 months. You can still record an opt-out, and we’ll honor it if that ever changes.
We treat a Global Privacy Control signal from your browser as a valid opt-out, and Google Analytics doesn’t load while it is on. For your other rights (to know, delete and correct), see the California section of our Privacy Policy.
10.Changes and contact
If we change this policy, we’ll update the date above. Questions: email privacy@kovu.gg.