Legal
Cookie Policy
Last updated October 13, 2026
1. Scope
Cookies and similar browser storage help MrKrox recognize a signed-in session, protect account flows, remember limited interface state, and attribute a genuine referral.
2. Essential authentication and security
- Session cookies: keep you signed in as you move through private pages.
- OAuth, CSRF, state, and PKCE cookies: short-lived values that protect Discord sign-in and account-linking flows.
- Security and preference storage: limited values needed for safe redirects, interface continuity, or abuse protection.
3. Referral attribution
When you open a dedicated referral link, MrKrox may store the referral code for a limited period so a later eligible Community creation can be attributed correctly. It does not by itself grant points: milestones remain subject to qualification and anti-fraud checks.
4. Payments
MrKrox does not place payment-card cookies. Continuing to Ko-fi opens a third-party service whose cookies and payment technologies are governed by Ko-fi and its connected payment provider.
5. Optional analytics and advertising
First-party audience and Joy Store measurements require the corresponding purpose consent. A random browser identifier links only the purposes you allow, using fixed page, source and campaign labels. No full URLs, search terms, email addresses, player names, uploaded content or payment details are included in this first-party dataset. Google Analytics is a separate optional service with its own purpose control. No fingerprinting or cross-site advertising tracking is used. IP addresses may be used transiently for abuse protection, not stored in the first-party analytics dataset.
Your choice is remembered in mrkrox_growth_consent for 180 days. When allowed, mrkrox_growth_visitor and mrkrox_growth_source last 30 days; only a hash of the random visitor identifier is stored in the database. Records older than 90 days are removed during routine collection or report reads. Browser Do Not Track signals are respected. These pseudonymous statistics are not a complete count of all visitors.
Use Manage analytics preference below to decline or withdraw. Withdrawal stops collection, clears the optional identifier and attribution cookies, and requests deletion of records linked to the current browser identifier. If you have already cleared or expired that identifier, earlier records cannot be linked back to this browser and expire under the retention process. Declining does not affect account, Free or Community access.
Optional Joy Store measurements include visits and fixed button categories such as Discord, WhatsApp, TikTok, gifts, skins and top-ups. No contact destination, chat message or order details are collected. Reports count unique consenting browsers, not completed sales.
6. Your controls
You can clear or block cookies in your browser. Blocking essential cookies prevents sign-in and private Community features, while public pages generally remain available.
7. Contact
Questions can be sent to MrKrox on Discord or through the feedback page.
Aggregate access statistics and optional purposes
MrKrox keeps daily page-view totals by fixed public or platform area. These counters do not store IP addresses, account or community IDs, visitor identifiers, full URLs, query strings or browsing journeys. They operate independently of optional analytics choices and are retained for up to 365 days. They count page views, including reloads and client-side navigation, not unique people.
Optional measurement has separate controls for audience and setup milestones, Joy Store visits and interactions, and external Google Analytics. Google tags load only after specific external-measurement consent and only when enabled by the operator. Private account, community and manager pages are excluded from Google Analytics. Advertising signals and personalization are disabled. Existing consent from the earlier first-party system does not authorize Google Analytics. Change or withdraw these choices on the Cookie Policy page.
