KippDashboardKipp Security Cookie Policy
Effective: October 3, 2026
Kipp's website (the dashboard and the verify page) uses a few small cookies. The sign-in cookies are strictly necessary: the site can't sign you in or keep you secure without them. The web check's browser id is only set after you agree to the check on the verify page. Kipp itself uses no advertising, analytics or tracking cookies. Third-party cookies only come from Google, and only if you choose them: Google Translate (below), or ads from Google where you pressed Show ads (below).
| Cookie | What it's for | How long it lasts |
|---|---|---|
mick_session | Keeps you signed in after you sign in with Discord. It holds a random session id, signed so it can't be forged. | Until you sign out, 7 days after your last visit, or 30 days at most |
mick_oauth_state | Protects the Discord sign-in from being hijacked (a one-time check value). | 10 minutes, deleted after sign-in |
mick_device | Set only after you agree to the web check on a server's verify page. A random id for this browser, so Kipp can tell when a second account verifies from the same browser. Kipp only keeps a one-way fingerprint of it (see the Privacy Policy). | 1 year |
Every cookie is:
- HttpOnly: scripts on the page can't read it;
- SameSite=Lax: other websites can't use it to act as you;
- Secure when the site runs over HTTPS, so it's never sent unencrypted. Over HTTPS the names start with
__Host-(for example__Host-mick_session), which stops any other website, including other mickbot.org addresses, from setting them.
Not cookies: things saved in your browser
mick-theme: your light or dark choice. It never leaves your browser.kipp-ad-consent: whether you pressed Show ads or No thanks for ads from Google. It never leaves your browser.- Pinned pages: the dashboard pages you pinned (with the pin next to a page's title) to the top of the sidebar. They never leave your browser.
mick_vid: set only on the verify page of servers that use the web check, after you agree to the check. A second random id for this browser, likemick_device, so clearing cookies alone doesn't make a browser look new. Kipp only keeps a one-way fingerprint of it.
Google Translate
Nothing from Google loads unless you press Translate at the bottom of a page. If you do, Google's translation script loads and may set its own cookies (for example googtrans, which remembers the language), under Google's own policies. Close the page or clear the site's data to remove them.
Ads
Some public pages (not server dashboards) can show an ad. Sponsor ads are served by Kipp itself and set no cookies; Kipp only counts how many times each was shown and clicked, not who saw or clicked it. Where an ad from Google could show, nothing from Google loads until you press Show ads; it then loads in a sealed-off frame and Google may set advertising cookies under its own policies. Press No thanks and that space stays empty. Your choice is saved in your browser as kipp-ad-consent; clear the site's data to be asked again. People who run a Kipp Plus server see no ads at all.
Removing cookies
You can delete Kipp's cookies in your browser settings at any time. Signing out removes the session cookie. Deleting mick_device means the browser looks new to the web check the next time you verify.
Changes
If Kipp ever adds a cookie that isn't strictly necessary, it will ask for your consent first and list it here.
Questions: email [email protected] or ask in the support server, https://discord.gg/8VHNkm4yU6