Summary
crownware.net sets only strictly necessary cookies: the session cookie that keeps you signed in, short-lived cookies that complete secure email links and two-factor challenges, and a session-length cookie when you choose not to stay signed in. Stripe and PayPal set their own fraud-prevention cookies on their checkout pages. We use no analytics, advertising, or social-media cookies and no cross-site tracking, so no consent banner is required and none is shown.
On this page
What cookies and similar technologies are
A cookie is a small text file that a website stores in your browser so that it can recognize your browser on later requests. Similar technologies include browser storage, pixels, and device fingerprinting. This policy is part of the Privacy Policy of Crownware Ltd Company (Crownware, we, us, or our) and lists every cookie and similar technology used on crownware.net.
Under the EU ePrivacy rules, section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), and the UK Privacy and Electronic Communications Regulations, cookies that are strictly necessary to provide a service that you have expressly requested may be set without consent. Every cookie that we set falls into that category. Cookies used for analytics, advertising, or cross-site tracking would require your consent; we do not use any.
Cookies set by crownware.net
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| crownware.session_token | Identifies your signed-in session so that you stay signed in as you move between pages. Marked HttpOnly, Secure, and SameSite=Lax. | Seven days from the last use; the expiry is extended once per day while you use the site. | Strictly necessary |
| crownware.dont_remember | Set when you sign in without choosing to stay signed in, so that the session ends when you close the browser. | Browser session | Strictly necessary |
| crownware.two_factor | Holds the pending two-factor challenge between entering your password and entering your code. | Ten minutes | Strictly necessary |
| crownware.trust_device | Set only if you choose to trust a browser after a two-factor sign-in, so that the code is not required again on that browser. Never used to skip step-up verification for sensitive actions. | Thirty days | Strictly necessary |
| crownware.email_verification | Carries the single-use token from an email-verification link while the link is completed, scoped to the verification path. | Until the link is completed or expires, at most twenty-four hours | Strictly necessary |
| crownware.password_reset | Carries the single-use token from a password-reset link while you choose a new password, scoped to the reset page. | Until the reset is completed or expires, at most one hour | Strictly necessary |
| crownware.email_change_current and crownware.email_change_new | Record that the current and the new email address have each approved a change of the account email address, scoped to the profile page. | Until the change is completed or expires, at most twenty-four hours | Strictly necessary |
We set no locale cookie: the site is currently offered in English only. We do not use browser local storage or session storage to track you; the sign-in page uses session storage only to remember, within a single browser tab, that you chose not to stay signed in.
Cookies and technologies used by our providers
| Provider | Where | What it does | Category |
|---|---|---|---|
| Stripe (stripe.com and js.stripe.com) | Stripe checkout pages, and the Stripe script loaded on our checkout pages | Stripe sets cookies such as __stripe_mid and __stripe_sid to detect fraud and to keep your checkout session; Stripe classifies them as essential. Stripe's cookie policy at stripe.com governs them. | Strictly necessary (fraud prevention and payment) |
| PayPal (paypal.com and paypalobjects.com) | PayPal checkout pages, and the PayPal script loaded on our checkout pages | PayPal sets cookies to keep your checkout session and detect fraud. PayPal's cookie statement at paypal.com governs them. | Strictly necessary (fraud prevention and payment) |
| Cloudflare Turnstile (challenges.cloudflare.com) | Sign-up, sign-in, password-reset, and verification-resend forms | Runs a bot-detection challenge in your browser. Turnstile evaluates browser signals and the IP address that we forward for verification; it sets no cookies in our configuration and is not used for advertising. | Strictly necessary (security) |
Stripe and PayPal scripts are loaded only on checkout pages, not on the public website. Our content-security policy prevents any other third-party script from running on crownware.net.
No analytics, advertising, or tracking
We do not use web analytics, advertising networks, social-media plug-ins, tracking pixels, or device fingerprinting, and no third party collects information about your activity on crownware.net over time and across other websites. We honor Do Not Track and Global Privacy Control signals in the sense that we never track visitors for advertising in the first place. If we ever introduce an optional technology that requires consent, we will ask for your consent first and update this policy.
Managing cookies
You can delete or block cookies in your browser settings at any time. Because every cookie we set is required for signing in and completing secure actions, blocking cookies for crownware.net will prevent you from signing in, verifying your email, and buying Passes; the public pages will continue to work. Signing out removes your session cookie, and revoking a session from the Security page of your dashboard invalidates it on the server even if the cookie remains in a browser.
Changes and contact
We update this policy whenever the cookies we use change. The version and effective date at the top of this page identify the current policy. Questions can be sent to admin@crownware.org.