Cookie Policy
Farmly sets only the cookies it needs to keep you signed in. No advertising cookies, no tracking cookies, no third-party cookies, which is also why there is no cookie banner to click away.
Cookies are small text files a website stores in your browser so it can recognise you between page loads. The law distinguishes cookies a site strictly needs to work from everything else, and only the everything else requires your consent. Farmly uses only the strictly necessary kind, so there is nothing to consent to. This page simply tells you exactly what is set and why.
The cookies Farmly sets
The session cookie (named authjs.session-token, with a __Secure- prefix over HTTPS) is what keeps you signed in; it holds an encrypted token identifying your session, lives for up to 30 days, and is renewed as you use the site. Without it you would have to sign in on every single page. Signed-out visitors never receive it.
Two small companion cookies protect the sign-in process itself: authjs.csrf-token guards forms against cross-site request forgery, and authjs.callback-url remembers which page to return you to after signing in. Both exist purely for security and navigation.
During a sign-in with Discord or Google, short-lived cookies carry the state of the OAuth exchange between our site and that service. They protect the sign-in from being hijacked and expire within minutes, on their own.
Small functional cookies
If you arrive through one of our own short promotional links (an address beginning with farmlymc.com/r/), a first party cookie named ref remembers which link that was for seven days, and a second one, rc, lists the links already counted for you, so opening the same link again does not count twice. They contain nothing but the links' short names, they are not identifiers, they are not shared with anyone, and we use them for two aggregate numbers: how many visits and how many sign ups each of our own posts brought. They expire on their own and you can delete them at any time without losing anything.
A cookie named lastSection remembers which edition of the library you browsed last, Java or Bedrock, so the links back to the farms open that one. It holds only that one word and lasts a year.
What we deliberately do not use
No advertising cookies, no analytics cookies, no third-party trackers. Our traffic numbers come from Cloudflare Web Analytics, which is built to work without cookies and without following you across the web. If this ever changes, for example if the site one day carries advertising, this page and the Privacy Policy will be updated first, and anything that legally requires consent will actually ask for it.
Cookies from other sites
Farm thumbnails are images loaded from YouTube's servers; loading an image does not let us set or read cookies for YouTube, and we send them nothing about who you are. When you click through to a tutorial, you leave for YouTube itself, where Google's own cookie rules apply, and the same goes for Discord or Google during a sign-in with them.
Controlling cookies
Every browser lets you inspect, block or delete cookies in its settings. Blocking or deleting our own cookies has one effect worth knowing: you are signed out and stay signed out. Browsing the library without an account works fine with cookies blocked entirely.
Changes and contact
If the list above ever changes, the date at the top of this page moves with it. Questions go to contact@farmlymc.com or the contact page.
Ask directly. It goes straight to the person who runs Farmly.