This policy explains our use of cookies and similar browser storage, including local storage and session storage.
What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. They help websites remember information about your visit.
Why do we use cookies?
evilkitty uses cookies to log you in, keep sign-in secure and remember the language and theme you pick. Optional website analytics are off until you choose to enable them. We do not place our own advertising cookies; embedded third-party media may use its provider's cookies.
What we keep in your browser
Essential cookies
These are needed to log in and protect requests, so they can't be turned off:
- Login (
__Secure-ek.session-token, or__Secure-next-auth.session-token): keeps you logged in for up to 30 days, on evilkitty.me and its docs and status pages - Other accounts (
__Secure-ek-account.<number>): the other accounts you logged in to on this device, so you can switch between them; up to 30 days - Sign-in security: a request-forgery check and the page to return to after logging in, until you close the browser, and short-lived checks of about 15 minutes while you log in with Discord or Google
- Connecting a login (
ek-oauth-link): for 10 minutes while you connect Discord or Google in Settings
Preference cookies
Set only when you make the choice, and kept for a year:
- Language (
ek_locale): the language you picked - Theme (
ek_theme): light or dark
Without a language choice, the home, pricing, leaderboard, docs and status pages follow the language your browser asks for; nothing is stored for that.
Local storage
- Your analytics choice (
evilkitty:analytics-consent), until you change it or clear browser data - Your cart and any discount code on the pricing page (
evilkitty:cart,evilkitty:code) - Display settings: the analytics and views chart periods in your dashboard, how the image host lists your files, and where the now-playing bar sits
Optional analytics
If you opt in, Umami uses session storage (umami-cache) to recognize page views within a browser-tab session. Umami is loaded only after you opt in. You can withdraw your choice at any time; withdrawal stops future optional analytics and removes Umami session storage in this browser. The choice is made separately on evilkitty.me and on its docs and status pages.
Data collection without cookies
Most data collection on evilkitty happens server-side and doesn't require cookies:
- Profile views are tracked in our database (not via cookies)
- User content and preferences are stored in our secure database
- Profile view and link-click counting uses a scrambled form of the IP address and the user agent to prevent duplicates, even without analytics consent
- Error reports, if something breaks, use no cookies
Third-party services
Third-party services can set their own cookies when you use their features:
- Stripe: on its own checkout page, when you pay
- Profile embeds: Spotify, SoundCloud, Instagram and Reddit content as soon as a page shows it, and YouTube and Twitch players when you press play
- Cloudflare: the network in front of the site may set its own security cookies to tell people from automated traffic
External providers operate independently and may have their own privacy policies.
How can you control cookies?
You can control and/or delete cookies as you wish. You can:
- Delete all cookies that are already on your computer
- Set your browser to prevent cookies from being placed
- Accept or reject cookies on a case-by-case basis
Please note that if you disable essential cookies, you won't be able to log in.
Changes to this Cookie Policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.
Contact Us
If you have any questions about our use of cookies, please contact us at: [email protected]