WodyOwner panel
Back to the panel
WodyOwner panel
Back to the panel
Last updated: September 6, 2026.
A cookie is a small text file, stored by the browser at a site's request, generally used to retain information between visits (for example, an authentication session).
This site (https://wody.live) is the private Wody Control Center administration panel, with access limited to the owner account and to team members the owner has explicitly granted view access to. We do not use analytics cookies (e.g. Google Analytics), marketing cookies, retargeting cookies, or any other tracking cookie. There is no language, preference, analytics, marketing, advertising, or tracking cookie. The cookies used are:
| Name | Type | Purpose | Duration |
|---|---|---|---|
__Host-session |
First-party, strictly necessary, HttpOnly, Secure |
Maintains the authentication session, after the owner has logged in with Discord. Contains only a cryptographically signed identifier (HMAC), no personal data in plain text. | 12 hours (owner) or 4 hours (team member with view access), then expires automatically. Also deleted when clicking "Log out". |
__Host-oauth_state |
First-party, strictly necessary, HttpOnly, Secure |
Verifies, exclusively during the Discord authentication process, that the request completing the login comes from the same browser that initiated it, a safety measure against login forgery, it does not track anything. | Maximum 10 minutes, deleted immediately after the login completes (or is abandoned). |
In addition to the cookies above, the site also uses exactly two localStorage keys (not cookies as such, not sent to the server with every request, they stay only in your browser):
| Name | Type | Purpose | Duration |
|---|---|---|---|
wody_cookie_notice_v1 |
localStorage, first-party | Remembers that you dismissed the cookie notice bar, so it is not shown again on every visit. | Permanent, until you clear the site's data in your browser. |
The __Host-session and __Host-oauth_state cookies are strictly necessary for
the operation of a service explicitly requested by the user (authentication),
falling under the exception provided by article 4(5) of Romanian Law no.
506/2004 on the processing of personal data and the protection of
private life in the electronic communications sector (the transposition
of Directive 2002/58/EC, the "ePrivacy" directive, as subsequently amended). The
notice bar shown on the site is purely for transparency.
The panel loads every page, script, font and image from this site only. Discord avatars and server icons are fetched by our server and passed to your browser from this domain, so your browser never contacts Discord's image servers and no third-party cookie can be set while you use the panel. Fonts come from your own device.
Your browser connects to another service only in these two cases:
| Domain | When | Why |
|---|---|---|
discord.com |
When you choose Continue with Discord | You are sent to Discord to sign in (OAuth2). Cookies on discord.com are managed by Discord Inc. under its own policy. |
vercel.com, blob.vercel-storage.com |
Only while the owner uploads a backup archive | The archive is sent straight to the private Vercel Blob storage, because large files cannot pass through the site's server. |
None of these services are used for analytics, advertising or retargeting.
You can delete or block cookies at any time from your browser's settings.
Blocking the __Host-session cookie will prevent access to the panel
after logging in (you will not be able to stay logged in). The localStorage keys
wody_cookie_notice_v1 can be
deleted from your browser's settings (site data). This will make the
cookie notice bar appear again.
For questions about this policy: teamswody@gmail.com.
← Back to the login page