LoDB
EN

Patch & language

Legal

Cookie Policy

Last updated

1. Our approach

League Of Data Base uses no advertising cookies, no third-party tracking cookies and no external analytics tool. The only cookies set are first-party cookies (issued by the site itself), strictly necessary for the service or used to remember a preference you explicitly asked for. Audience measurement is performed without cookies (see the privacy policy).

2. Cookies we use

NameTypePurposeLifetime
__Host-lodb.antiforgery
XSRF-TOKEN		Essential (security) Anti-CSRF protection pair, set on every visit: the first is HttpOnly, the second is read by the site's script and sent back in a header with every change you submit — SameSite=Strict, Secure over HTTPS Session — deleted when the browser closes
__Host-lodb.sessionAuthentication (set only when you sign in) Keeps you signed in to your account. Protected content, nothing kept on the server — HttpOnly, Secure, SameSite=Lax Browser session, 1 day at most; 30 days, renewed while in use, if you tick "keep me signed in"
.AspNetCore.Correlation.*Authentication (set only when you sign in with Google) Protects the round trip to Google's sign-in page against forgery; deleted on your return — HttpOnly, Secure, SameSite=Lax 15 minutes at most
lod_prefsPreference (set only if you tick "remember" in the version/language selector) Remembers your chosen site language, Data Dragon language and version between visits; the server reads the site language to open the home page (/) in it. Unsigned content, readable by the site's scripts — SameSite=Lax, Secure over HTTPS. Without the tick, the choice lasts for the browsing session only, in the browser's session storage, not in a cookie 1 year
lod_themePreference (set only if you pick a theme) Remembers the colour theme you chose. Readable by the site's scripts — SameSite=Lax, Secure over HTTPS 1 year

No other cookie is set by the site. The site does not use the browser's local storage (localStorage) for tracking purposes either: all it keeps there, if you make it, is your choice not to be counted in the audience measurement (lodb.audience.opt-out), which is never sent anywhere.

4. Stripe checkout

When you make a donation, you are redirected to a payment page hosted by Stripe (stripe.com domain). Stripe then sets its own cookies on its own domain, in particular for security and fraud prevention; those cookies are neither controlled nor readable by League Of Data Base. See the Stripe cookie policy for details.

5. Installable app (PWA)

The site can be installed as an app (PWA). In that context, a service worker keeps local copies of site resources (pages, styles, images) in your browser's cache to speed up navigation and allow degraded offline browsing. These caches are purely technical: they contain no tracking identifier and never leave your device. You can clear them at any time from your browser settings ("clear site data").

6. Managing or deleting

You can delete existing cookies and configure your browser to refuse them at any time ("Privacy" or "Cookies and site data" settings). Possible consequences:

  • without the session and security cookies, browsing still works — the version and the language you read are in the page's address — but signing in to an account becomes impossible;
  • deleting __Host-lodb.session signs you out;
  • deleting lod_prefs resets the remembered language and version;
  • deleting lod_theme restores the default theme.

Questions: charles.lindecker@outlook.fr.