In short. frostclient.xyz sets two cookies. Both are strictly necessary: one keeps you signed in and one protects Discord sign-in from forgery. There are no analytics, advertising or tracking cookies, no local storage and no third-party scripts, so there is no consent banner.
§1 Cookies Frost sets #
| Name | Purpose | Category | Lasts |
|---|---|---|---|
frost_session | Keeps you signed in. Holds a random token; the server stores only its hash. Set when you sign in. | Strictly necessary | Up to 30 days, or until you log out |
frost_oauth_state | Matches the Discord sign-in or connection you started to the one Discord sends back, so another site cannot complete it for you. Set only when you start Discord sign-in. | Strictly necessary (security) | 10 minutes, removed when sign-in finishes |
Both cookies are first-party, readable only by the server (HttpOnly), sent only over HTTPS (Secure), and not sent with requests started by other sites, except plain links (SameSite=Lax).
§2 What Frost does not use #
- No analytics tools, pixels or advertising cookies.
- No browser local storage, session storage or IndexedDB.
- No third-party scripts, fonts or embedded content. Fonts and videos are served from frostclient.xyz itself.
- No fingerprinting of your browser.
Frost counts daily views of the home page on the server, without any cookie or identifier.
§3 Why there is no cookie banner #
EU and UK rules require consent before storing information on your device, except where it is strictly necessary to provide a service you asked for. Signing you in and protecting sign-in from forgery fall under that exception, and Frost sets nothing else. A banner would ask you to agree to something there is no choice about.
If Frost ever adds a cookie or similar technology that is not strictly necessary, such as analytics, it will not be set until you agree, you will be able to refuse as easily as accept, and this page will be updated first.
§4 Other sites you visit through Frost #
When you sign in with Discord or pay through NOWPayments, you go to discord.com or nowpayments.io. Those sites set their own cookies under their own policies; Frost cannot see or control them.
§5 Controlling cookies #
You can delete or block cookies in your browser settings. If you block frost_session, you cannot stay signed in; if you block frost_oauth_state, Discord sign-in will fail.