Republic Cookie Policy

Storage used by Republic

Republic uses small pieces of browser storage to maintain the service you request. The current application has no advertising cookies, analytics tracker, or optional tracking integration. We therefore do not display a consent banner that asks you to approve tracking which does not exist. If optional tracking is introduced, it must be disabled until the consent required in your jurisdiction is obtained, with equally accessible Accept All, Reject Optional, and Customize choices. Optional consent must remain separate from account creation and Terms acceptance.

Authentication and security

The republic-auth cookie family contains protected session credentials and may be split into multiple cookies. These cookies are HttpOnly, use Secure transport in production, and use a SameSite policy intended to support secure sign-in. They are necessary for authenticated pages and actions and expire after up to 45 days or earlier if a session is revoked. The republic_discord_oauth cookie protects a single sign-in attempt and expires after 10 minutes. The republic_discord_pending cookie holds an encrypted, short-lived connection proof while an account is created or linked and also expires after 10 minutes. Discord credentials are not readable by application JavaScript.

The republic_device cookie is a limited-life security identifier used to protect accounts and detect abuse or circumvention. Its maximum lifetime is 90 days. It is not an advertising identifier and is not used to follow you across unrelated websites. The account's security records have their own retention controls.

Saved accounts and local caches

If you choose to save an account on this device, a republic_account_ cookie stores an encrypted session for that selected account, for up to 45 days. Up to five separate accounts can be saved; each must have its own Discord connection. Remove a saved account or sign out from Security settings to remove the corresponding local session. Do not save accounts on a shared device. In-memory navigation, interaction, and notification caches help avoid repeated requests. They are scoped to the account and cleared or separated when accounts change; they are not a public database or an advertising profile.

Your choices

Security settings let you remove saved accounts and sign out. Browser settings let you delete or block storage, but blocking necessary authentication storage can prevent sign-in, account switching, or protected actions. Changing cookie preferences does not automatically erase information already lawfully recorded by the service. Privacy requests and deletion controls are available separately. Discord and external sites may use their own storage when you visit or authorize them; their policies apply there.