Cookie Policy

Wody is operated by Păcurar Ancuța-Narcisa, an individual based in Romania, European Union (the “Operator”). The Operator can be contacted at privacy@wody.online. Wody uses the first-party cookies described in the table below: two strictly necessary cookies for dashboard authentication and OAuth2 login security, one strictly necessary cookie that records your cookie consent choice, and one optional preference cookie that is only created if you enable Preferences. Wody does not use advertising cookies, analytics cookies, profiling cookies or third-party tracking cookies on the dashboard. Wody does not intentionally target children below the minimum age required to use Discord. Users must meet Discord's applicable minimum age for their country or region and any higher minimum age required by local law. Where applicable law requires parental or guardian consent, that requirement remains applicable.

wody_session contains a random session identifier and a cryptographic signature. It does not contain your Discord access token, refresh token or profile.

wody_oauth_state contains a random temporary value and a cryptographic signature. It is used only to confirm that the OAuth2 login response matches a login started by your browser.

Both values are Base64URL encoded and signed. They are not encrypted. The signature prevents a modified or forged value from being accepted by the dashboard. The actual session information is stored server side in MongoDB and is associated with the random session identifier. The server-side session contains the cached Discord profile, access token, refresh token and expiry time; these values are not placed in either browser cookie. The access token session expiry is calculated from the lifetime supplied by Discord and is set 60 seconds before that token expires. The refresh token is stored with the session but the current implementation does not use it to refresh an expired access token.

Both cookies are HttpOnly, which prevents normal page JavaScript from reading them. They are Secure and therefore sent only over HTTPS. They use SameSite=Lax to reduce cross site request risks and are scoped to the root path of the dashboard.

Wody uses the strictly necessary wody_cookie_consent cookie to record and respect your cookie choice. It records whether you accepted, rejected or customized the optional preference category and whether language preferences are enabled. This record is not used for analytics, advertising or profiling.

The optional wody_language cookie is used only to remember a language that you actively select. The language selector is not displayed until you have given consent for Preferences, and Wody does not create or update wody_language before that consent exists. Rejecting Preferences prevents the selector from being shown and prevents this cookie from being set or updated by Wody.

You can review and change your cookie choice at any time using the controls below. You can enable or disable Preferences. Disabling Preferences deletes the wody_language language cookie and immediately hides the language selector. Changing or withdrawing consent does not affect the lawfulness of processing already carried out before withdrawal where applicable.

During login, you are temporarily redirected to Discord. Discord may set and read its own cookies on discord.com under its own policies. Wody does not control those cookies and does not receive the contents of Discord's browser cookie storage. Information about Discord's own cookies is available in Discord's Cookie Policy and its Privacy Policy.

You can delete or block cookies through your browser settings. If you block or delete wody_session, the dashboard cannot keep you signed in. If you block wody_oauth_state, Discord login cannot be completed safely.

Logging out removes the wody_session cookie and deletes the associated server side session record. The wody_oauth_state cookie is removed after the OAuth2 response is checked and expires automatically after 10 minutes if the login process is not completed.

If you delete wody_cookie_consent, Wody no longer knows which choice you made, so the cookie banner is shown again on your next visit and you can make a new choice. If you delete wody_language, or if you clear it through the controls in this Policy, the language selector reverts to hidden until you consent to Preferences again, and the site is shown in English until you choose another language.

The wody_session and wody_oauth_state cookies, and the wody_cookie_consent cookie used to record your privacy choice, are used only where necessary to provide and secure the dashboard login and to respect your cookie choice. They are therefore treated as strictly necessary technologies rather than optional advertising or analytics cookies. The optional wody_language preference cookie is instead based on your consent and is only set once you enable Preferences. Personal data associated with the authenticated session is processed separately under the legal bases described in the Privacy Policy. This Cookie Policy describes the technologies actually used by the Wody dashboard; Discord may use additional cookies on discord.com under its own policies.

If Wody introduces another cookie or browser storage technology, this Policy will be updated to describe its purpose, contents and retention period where applicable.

For privacy, legal, or data protection questions, contact Păcurar Ancuța-Narcisa, the Operator, at privacy@wody.online.