Cookie Policy

1. What this page is

A cookie is a small file a website asks your browser to keep, so that the site can recognise the browser on the next request. This page lists every cookie edits.gg sets, what each one is for, and how long it lasts. We do not use any cookie for advertising or for tracking you across other websites.

Every cookie here is set by us, on edits.gg. None of them is set by a third party, and none is shared with one.

2. Staying signed in

When you sign in, our authentication provider sets session cookies whose names begin with sb-. They hold your session and are what keeps you signed in between pages. They are essential: without them the site cannot tell one signed-in person from another, and you would be signed out on every click. They are refreshed while you use the site and are cleared when you sign out.

edg_setup, kept for 7 days. Once you have finished signing up, this records that you have, so that pages can load without checking the database again on every request. It holds nothing but that note and the account it was written for, it is not readable by JavaScript, and it does nothing in a browser signed in as somebody else. It expires on its own, and deleting it changes nothing you would notice.

3. Remembering which browsers you have verified

edg_device, kept for 30 days. Once you have entered a sign-in code, this records that this browser has passed one. It does not let anybody skip the code: every sign-in asks for one.

It holds a random value and nothing else. It is not readable by JavaScript, it is not an identifier we use anywhere else, it is replaced with a new value every time a code is used, and signing out clears it. Deleting it changes nothing you would notice.

4. Cookies that only exist mid-flow

edg_challenge, kept for 15 minutes. It links the sign-in code we emailed you to the step where you type it in, so that a code cannot be used from somewhere else. It is deleted the moment the code is used.

edg_payout_challenge, kept for 15 minutes. The same thing for the code we send when you change where your money is paid out to. Changing a payout destination is the one action worth an extra check, so it has its own code and its own cookie.

edg_email_stepup, kept for 15 minutes. The same thing again for the code we send to your CURRENT address before your email can be changed. Moving the address is what gets you back into the account, so it takes its own check.

edg_admin_login, kept for 15 minutes. Only ever set on the staff console, holding which sign-in code that browser is answering.

eg_admin_grant_challenge, kept for 15 minutes. Only ever set for staff, holding the code that confirms a change to who has admin access.

tiktok_oauth_state, kept for 10 minutes. Set when you press Sign in with TikTok. It is a random value we check on the way back, so that somebody else cannot start that flow on your behalf. It is deleted the moment you return.

google_oauth_state, kept for 10 minutes. The same thing again for connecting a YouTube channel with Google. It is a random value we check on the way back, and it is deleted the moment you return.

discord_link_confirm, kept for 10 minutes. Set when you come back from Discord while linking your Discord account. It holds a random value and the Discord account you signed in with, so that the confirm button you then press is answering the same link you started. It only exists on that one page and is deleted the moment you confirm or cancel.

5. Things kept in your browser, not sent to us

Two things are stored by your browser and never sent to our servers. The homepage keeps a note that its opening animation has already played, so it does not replay on every visit in the same tab session. Your dashboard keeps a copy of your notification preferences so the page can render them before it has heard back from us.

A campaign you are building is also saved in your browser as you type, so a refresh does not lose it. It is cleared once the campaign is saved.

6. Consent

We do not show a cookie banner, because everything above is strictly necessary for the site to work: signing in, staying signed in, and confirming it is you. None of it is used for advertising, analytics or profiling, so there is nothing to ask you to opt into and nothing you could turn off while still being able to sign in.

7. What we do not use

We do not use analytics cookies, advertising cookies, retargeting pixels, social media tracking pixels, or any third-party tracker. There is no Google Analytics, no Meta pixel, and no tag manager on this site. We do not sell or share your information with anyone for advertising.

We do count page views, using Vercel Web Analytics. It does not set a cookie and does not store anything on your device, which is why it does not appear in the table above. It records the page you visited, the country you visited from, and the kind of device. It does not identify you.

8. Managing cookies

Every browser lets you see and delete cookies, and block them. Blocking or deleting ours will sign you out and will mean you are asked for an emailed code the next time you sign in. Connecting a TikTok account, a YouTube channel or a Discord account also needs one for the length of that flow, because the check that stops somebody starting it on your behalf is a value we leave in your browser and read on the way back.

9. Contact

Email support@edits.gg or find us in our Discord.