Legal
Cookie Policy
This page lists the cookies and browser storage Java Lava uses, what each is for, and how to change your choices.
1. What This Covers
Cookies are small files a website stores in your browser. We also use similar browser storage (localStorage) for preferences. This page lists what Java Lava uses and how to control it. For how we handle personal data more generally, see the Privacy Policy.
2. Strictly Necessary Cookies
These keep you signed in to the dashboard. They are set only after you sign in with Discord, are needed for the service to work, and so do not require consent. Both are HttpOnly (page scripts cannot read them), SameSite=Lax, and Secure in production.
| Name | Purpose | Lifetime |
|---|---|---|
| jl_session | Short-lived access token proving you are signed in. | 15 minutes, renewed while you stay signed in |
| jl_refresh | Lets us renew your session without asking you to sign in again. Revoked on sign-out. | Up to 5 hours from sign-in |
3. Preferences in Browser Storage
These values stay in your browser and are not sent to us. They remember choices you make and are needed for the features you use, so they do not require consent.
| Key | Purpose |
|---|---|
| javalava-consent | Your cookie choices and when you made them. |
| javalava-accent-color | Your chosen dashboard accent color. |
| javalava-dashboard:<server ID> | Card and leaderboard style settings for a server while you edit the dashboard. |
| javalava-sidebar-collapsed-categories | Which dashboard sidebar groups you have collapsed. |
| javalava-dashboard:recent-emoji | Your recently used emoji in the dashboard emoji picker. |
4. Optional Categories
Two optional categories exist and are off until you allow them.
- Analytics. If you allow it, we use Google Analytics 4 (Google Ireland Limited / Google LLC) to count visits and see which pages are used, so we can improve the site. It sets the cookies
_gaand_ga_<ID>(up to two years) and sends page views, your approximate location derived from your IP address, and browser and device type to Google. We turn off advertising features and Google signals, do not send Discord IDs (private dashboard pages are not reported and server and user IDs in page addresses are removed), and Google Analytics does not store full IP addresses. Nothing loads until you allow it, and it is always treated as declined if your browser sends a Do Not Track or Global Privacy Control signal. Withdrawing your choice stops collection and deletes these cookies. - Third-party embeds. Videos or other content hosted by other sites, which may set their own cookies. We do not currently embed any such content that needs your consent. If we add it, it will load only after you allow it.
5. Third Parties
Signing in redirects you to Discord, which sets its own cookies under Discord’s Privacy Policy. Discord avatars and images are loaded from Discord’s content servers, which can receive your IP address when your browser fetches them. Google Analytics, if you allow it, is described above. We do not use advertising cookies.
6. Managing Your Choices
You can change or withdraw your choices at any time. Your choice is remembered until we change the categories we use, at which point we will ask again.
You can also delete cookies and site data in your browser settings. Blocking the necessary cookies will stop sign-in from working, and clearing browser storage resets your saved preferences.
7. Changes to This Policy
If we add or change the cookies or storage we use, we will update this page and its “Last updated” date. For questions, use the support page.