Cookie Policy
Last updated: 2026-07-17
In plain English: we set a cookie to keep you signed in, one to remember which product you're on and one to remember your cookie choice. No ad trackers, no analytics. Stripe's scripts load while you're signed in and set their own cookies. You can clear any of it in your browser.
We use a small set of cookies and similar browser storage. No advertising cookies.
Strictly necessary
auth_session, session authentication, HttpOnly + Secure + SameSite=Lax, scoped to.fightclub.pro. Expires after 1 hour of inactivity and rolls forward while you are active. Set only after you sign in.fc_admin_session, signed admin-impersonation cookie (admins only), 1 hour max.x-vertical-id, remembers which product surface you're on; 365 days, not used for advertising.ko_auth_pending, short-lived cookie carrying the Knockout CLI sign-in handshake, HttpOnly + Secure, expires in 5 minutes.fc_gdpr_accepted, remembers your cookie choice so we don't keep asking; 1 year, scoped to.fightclub.pro.- CSRF headers, requests are validated by Origin/Referer; no CSRF cookie is set.
Preferences
fc_theme, remembers light/dark theme; a cookie lasting 1 year, scoped to.fightclub.pro(not session-scoped).
Payments (Stripe)
We take card payments with embedded Stripe Elements, not a Stripe-hosted checkout page. Stripe's scripts load on our authenticated pages and set Stripe's own first-party cookies (for example __stripe_mid, __stripe_sid) on fightclub.profor fraud detection and payment-session continuity. These load while you are signed in and are not gated behind the cookie banner today. See stripe.com/cookie-settings.
Automated sign-up protection
Google reCAPTCHA is wired into registration but currently disabled, so no_GRECAPTCHA cookie is set. If we re-enable it, it will load only after you accept functional cookies on our banner, and we will update this page first.
Local storage
Some UI preferences are kept in your browser's local storage, which persists until you clear it (it is not session-scoped):
fightclub:sidebar-collapsed, whether the sidebar is expanded or collapsed.fightclub.soundsEnabled, whether fight sound effects are on.koent.layout.*, Knockout Enterprise dashboard layout (keyed by organisation and view).
No analytics, no ads
We don't use Google Analytics, Plausible, PostHog, Mixpanel, or any advertising tracker. We rely on server-side request logs for aggregate usage metrics and billing reconciliation.
Your choice
The cookie banner lets you accept or reject functional cookies. Strictly-necessary cookies are always set when you sign in, without them the platform can't authenticate you. You can clear cookies any time in your browser.
Contact
Email: privacy@fightclub.pro.