Cookie Policy
Which cookies and browser storage MonoAdmin uses: none of its own on this website, a few strictly necessary ones in the panel, and none for tracking or ads.
This page lists every cookie and every piece of browser storage that MonoAdmin sets, and what it is for. There are no tracking or advertising cookies anywhere on MonoAdmin, and we do not use analytics. Error reports, which a page sends to Sentry when something fails, set no cookie, use no browser storage and are not analytics.
The Short Version
- This website and the documentation (monoadmin.net) set no cookies of their own and have no analytics. Cloudflare, which delivers them, may set a strictly necessary security cookie. When a script on a page fails, the page sends an error report to Sentry, which sets no cookie and uses no storage. The videos on the home page and in the documentation load from YouTube only when you press play.
- The panel (app.monoadmin.net) sets only the cookies it needs to keep you signed in. They are strictly necessary, so there is no cookie banner and nothing to switch off. Its errors are reported to Sentry in the same way.
- Browser storage holds a few harmless preferences, such as light or dark mode. Nothing in it is personal, and none of it is sent to us.
- Cloudflare Turnstile, a bot check, runs on the sign-in, sign-up, password reset and whitelist application pages. Cloudflare’s own privacy terms apply to it.
Cookies in the Panel
These cookies are set by our API address, api.monoadmin.net, when you use the panel at app.monoadmin.net. All of them are HttpOnly, so scripts on the page cannot read them, and all of them are Secure, so they travel only over HTTPS.
| Cookie | What it is for | How long it lasts |
|---|---|---|
__Host-ma_session |
Keeps you signed in. It holds a random token, and we store only a hash of it. | Until the session ends: 14 days without use, or 60 days after sign-in at the latest |
__Host-ma_oauth |
Ties a “Continue with Discord” round trip to your browser, so nobody else can finish it. Only set while you sign in or link Discord. | 10 minutes, and deleted when you come back from Discord |
Both are strictly necessary for the service you asked for. We use them for sign-in and nothing else.
Two more cookies exist for MonoAdmin’s own staff and are never set in your browser: one for the staff back office, and one for the 30-minute support session that staff can open as your account (see the Privacy Policy).
Browser Storage
The panel and this website remember a few choices in your browser’s local storage, which stays on your device. They hold no credential and no personal data. The site and the panel work without them.
| Key | Where | What it remembers |
|---|---|---|
ma-site-theme |
This website | Light or dark mode |
ma-docs-nav |
This website, the docs (session storage) | How far the docs sidebar was scrolled |
ma-theme |
The panel | Light or dark mode |
ma-skin |
The panel | The admin theme last shown on this device (yours, or your project’s) |
ma-sidebar |
The panel | Whether the sidebar is collapsed |
ma-map-style |
The panel | Your style of the Server Map |
ma-monitor-grid |
The panel | The grid size of the Player Monitor |
ma-maintenance-dismissed |
The panel (session storage) | That you closed a scheduled-maintenance notice |
ma-ingame-rail |
The in-game panel | Whether its sidebar is expanded |
The in-game menu and the in-game panel run inside the game on the player’s own computer, and keep their own preferences there, such as menu settings. That storage is on the player’s computer and is not sent to MonoAdmin.
Cloudflare Turnstile
Sign-in, sign-up, password reset and the public whitelist application page use Cloudflare Turnstile to tell people from bots. When one of these pages loads, your browser fetches the check from Cloudflare (challenges.cloudflare.com), and Cloudflare receives what it needs to run it, including your network address. Our server then sends Cloudflare the result, with your network address, to confirm it. Cloudflare decides what, if anything, Turnstile stores on your device, and its own privacy policy applies. We do not control it.
Other Services
- Cloudflare carries the traffic to this website, the panel and our API, and sees the requests as any network does. It may set a strictly necessary security cookie.
- Tebex runs the checkout on its own site: on its store pages, and for paid plans in a frame over the panel (Settings > Plan). Its cookies are governed by Tebex’s own policies, not ours.
- Discord sets its own cookies on its own site when you sign in with it.
- YouTube plays the videos on the home page and in the documentation, from its privacy-enhanced mode (youtube-nocookie.com), and only after you press play. Until then nothing is loaded from it. Once the video plays, YouTube may set cookies or store data in your browser under Google’s own privacy policy.
- Sentry receives error reports (see the Privacy Policy). The script that sends them is served from our own address, sets no cookie and keeps nothing in your browser’s storage. It makes one request to Sentry, only when something fails, and it is not analytics: it sends no page views and no recordings.
- Fonts and map tiles are served from our own address. We load nothing from Google Fonts or from an advertising network.
Your Choices
You can block or delete cookies in your browser settings. If you block the sign-in cookie, you cannot sign in to the panel. If you clear the browser storage, your preferences go back to their defaults.
Changes
If we add a cookie that is not strictly necessary, we will change this policy, ask for your consent first and tell you in advance. The date at the top says when this page was last changed. For other questions, write to hello@monoadmin.net.