Skip to main content
Legal

Cookie and Storage Notice

Every cookie and browser storage item we use, and why.

  • Version 1.0
  • Effective October 29, 2026
  • For: Everyone who visits TeamALA

In short

  • TeamALA uses no advertising, tracking or third-party analytics cookies. Everything below is set by TeamALA itself. Each item is needed to sign you in, to keep you secure, or to remember a choice you made. That is why we do not ask for consent; the law does not require it for these.

Cookies

  • teamala_account_session

    What it does
    keeps you signed in. HttpOnly, Secure, SameSite=Lax.
    How long
    7 days.
    Where
    all teamala.org subdomains.

  • teamala_session

    What it does
    older staff password sign-in, until it is retired.
    How long
    7 days.
    Where
    all teamala.org subdomains.

  • teamala_oauth_bind

    What it does
    ties a Roblox or Discord sign-in to the browser that started it.
    How long
    10 minutes.
    Where
    sign-in pages.

  • teamala_signin_step

    What it does
    holds your place in the age and terms step of a first sign-in.
    How long
    10 minutes.
    Where
    sign-in pages.

  • teamala_age_block

    What it does
    stops an immediate retry after an under-13 answer. Holds no identifier.
    How long
    until the browser closes.
    Where
    sign-in pages.

  • teamala_step_up

    What it does
    proves you recently confirmed your identity again, before a sensitive action.
    How long
    5 minutes.
    Where
    all teamala.org subdomains.

  • teamala_passkey_ceremony

    What it does
    holds a one-time challenge while you sign in with a passkey.
    How long
    3 minutes.
    Where
    sign-in and admin pages.

  • nora_session

    What it does
    keeps you signed in to the Nora by TeamALA dashboard.
    How long
    up to 12 hours.
    Where
    nora.teamala.org.

  • nora_oauth_state

    What it does
    protects the Nora dashboard's Discord sign-in against forgery.
    How long
    10 minutes.
    Where
    nora.teamala.org.

  • teamala-theme

    What it does
    remembers your light or dark theme.
    How long
    1 year.
    Where
    all teamala.org subdomains.

  • teamala_flag_overrides and teamala_flags_overridden

    What it does
    TeamALA staff only. Lets staff preview features that are not yet released.
    How long
    24 hours.
    Where
    staff pages.

Browser storage (stays on your device; never sent to us)

  • teamala-sidebar-manage, teamala-sidebar-admin, teamala-sidebar-account (and similar)

    What it does
    remembers whether a sidebar is open or collapsed.
    How long
    until you clear it.

  • Keyboard shortcut preference

    What it does
    remembers whether single-key shortcuts are on or off.
    How long
    until you clear it.

  • Screening walkthrough

    What it does
    remembers that you have seen the screening walkthrough.
    How long
    until you clear it.

Other things your browser loads

Avatars and badges load straight from Roblox's and Discord's image servers, so those platforms can see your IP address. Screening's 3D avatar files come through TeamALA's own proxy instead. Custom short-link domains only redirect, and set no cookies.

Your choices

You can delete cookies and browser storage in your browser's settings at any time. If you delete the sign-in cookies, you will be signed out.

Contact

privacy@teamala.org