Cookie Policy

Last updated: August 2026

Overview

This Cookie Policy describes the cookies and local storage items Descrimen uses. Descrimen uses the minimum necessary set of cookies for authentication and security. No tracking cookies. No third-party advertising.

A cookie is a small file stored on your device by your browser. Local storage is a similar mechanism with a larger capacity. Both are used by Descrimen as described below.

Session Cookie

Descrimen uses one session cookie named descrimen_session. The cookie authenticates your session after login. Without it, every page request requires re-authentication.

Attributes:

  • HTTP-only: JavaScript cannot read the cookie, which reduces exposure to cross-site scripting attacks
  • Secure: transmitted only over HTTPS
  • SameSite=Lax: not sent on cross-site requests except top-level navigations
  • Lifetime: 30 days from last activity, then expires
  • Scope: descrimen.example domain only

The session cookie is essential. The platform does not function without it.

CSRF Token Cookie

Descrimen uses a CSRF token cookie named descrimen_csrf. The cookie stores a token that is also embedded in forms and API requests. The server compares the two values to block cross-site request forgery.

Attributes:

  • HTTP-only: no
  • Secure: yes
  • SameSite=Lax
  • Lifetime: session, expires on browser close
  • Scope: descrimen.example domain only

The CSRF cookie does not contain identifying information. It is a random token that changes per session.

No Tracking Cookies

Descrimen does not set tracking cookies. There are no cookies that follow you across other websites. There are no cookies that build a profile of your browsing behavior outside the platform.

If Descrimen adds a tracking cookie in the future, it will be opt-in only and disclosed in this policy before deployment.

No Third-Party Advertising

Descrimen does not display third-party advertising. There are no ad-network cookies, no remarketing pixels, and no social-platform embed cookies.

Embedded third-party content, when present, is loaded without cookies where possible. If a third-party embed sets cookies, it is disclosed in this policy.

Analytics

Descrimen does not run analytics by default. No analytics cookies are set.

A first-party analytics tool may be enabled in the future. If enabled, it will be opt-in only. Users who do not opt in will not have analytics cookies set and will not be tracked by the analytics tool.

Aggregate, anonymized counters—such as page views—may be collected without cookies. These counters do not identify individual users.

Local Storage

Descrimen uses local storage for UI state that does not need to be sent to the server:

  • Theme: light or dark preference, persists across sessions
  • Last page: the most recent page you visited, used to restore position after reconnection
  • Sidebar collapse state: whether the sidebar is open or closed
  • Draft submissions: in-progress submission text, retained to prevent loss on refresh

Local storage items are not cookies. They are not sent to the server on every request. They remain on your device until you clear them or until Descrimen's code removes them.

Essential vs Non-Essential

Descrimen's cookies are categorized as follows:

  • Essential: descrimen_session, descrimen_csrf. Required for the platform to function. Cannot be disabled.
  • Functional: local storage items for theme and UI state. Improve usability but are not required.
  • Analytics: none by default. Only set if you opt in.
  • Marketing: none. Never set.

Because the only cookies Descrimen sets are essential, no cookie consent banner is shown. The platform does not require consent for essential cookies under most jurisdictions.

Researchers who wish to disable essential cookies may do so through browser settings. The platform will not function properly with them disabled.

How to Clear Cookies

You can clear Descrimen's cookies at any time through your browser settings. Clearing cookies logs you out and discards your session.

Browser-specific instructions:

  • Chrome: Settings > Privacy and security > Cookies and other site data > See all site data and permissions, search for descrimen.example, click Remove
  • Firefox: Settings > Privacy & Security > Cookies and Site Data > Manage Data, search for descrimen.example, select Remove
  • Safari: Preferences > Privacy > Manage Website Data, search for descrimen.example, click Remove
  • Brave: Settings > Shields > Cookies and other site data, or use the lock icon in the address bar

To clear local storage as well, use the same browser settings. In Chrome and Firefox, "site data" includes both cookies and local storage.

Clearing cookies does not delete your account. Your submissions, payouts, and account data remain on the server. You can log back in to restore access.

If you clear cookies mid-session while editing a submission, the draft stored in local storage is preserved. The draft will be offered as a recovery option the next time you open the submission form on the same browser.

Third-Party Iframes and Embeds

Some pages may embed third-party content such as block explorer widgets, on-chain data previews, or documentation viewers. These embeds are loaded in sandboxed iframes where possible.

Sandboxed iframes cannot set first-party cookies on descrimen.example. If a third-party embed sets its own cookies, those cookies are governed by the third party's policy, not this one. Descrimen lists any embeds known to set cookies in this section.

As of the last update, no third-party embeds on the platform set cookies. Researchers who observe an embed setting cookies are encouraged to report it via the contact page so this policy can be updated.

Changes

Descrimen may update this Cookie Policy. Material changes—such as adding a new cookie or enabling analytics—will be announced 30 days before they take effect.

ACCESS GRANTED