Cookie Policy
Farmly sets only the cookies it needs to keep you signed in. No advertising cookies, no tracking cookies, no third-party cookies, which is also why there is no cookie banner to click away.
Cookies are small text files a website stores in your browser so it can recognise you between page loads. The law distinguishes cookies a site strictly needs to work from everything else, and only the everything else requires your consent. Farmly uses only the strictly necessary kind, so there is nothing to consent to. This page simply tells you exactly what is set and why.
The cookies Farmly sets
The session cookie (named authjs.session-token, with a __Secure- prefix over HTTPS) is what keeps you signed in; it holds an encrypted token identifying your session, lives for up to 30 days, and is renewed as you use the site. Without it you would have to sign in on every single page. Signed-out visitors never receive it.
Two small companion cookies protect the sign-in process itself: authjs.csrf-token guards forms against cross-site request forgery, and authjs.callback-url remembers which page to return you to after signing in. Both exist purely for security and navigation.
During a sign-in with Discord or Google, short-lived cookies carry the state of the OAuth exchange between our site and that service. They protect the sign-in from being hijacked and expire within minutes, on their own.
One functional cookie
If you arrive through one of our own short promotional links (an address beginning with farmlymc.com/r/), a first party cookie named ref remembers which link that was for seven days. It contains nothing but the link's short name, it is not an identifier, it is not shared with anyone, and we use it for a single aggregate number: how many sign ups each of our own posts brought. It expires on its own and you can delete it at any time without losing anything.
What we deliberately do not use
No advertising cookies, no analytics cookies, no fingerprinting, no third-party trackers. Our traffic numbers come from Cloudflare Web Analytics, which is built to work without cookies and without following you across the web. If this ever changes, for example if the site one day carries advertising, this page and the Privacy Policy will be updated first, and anything that legally requires consent will actually ask for it.
Cookies from other sites
Farm thumbnails are images loaded from YouTube's servers; loading an image does not let us set or read cookies for YouTube, and we send them nothing about who you are. When you click through to a tutorial, you leave for YouTube itself, where Google's own cookie rules apply, and the same goes for Discord or Google during a sign-in with them.
Controlling cookies
Every browser lets you inspect, block or delete cookies in its settings. Because everything Farmly sets is essential, blocking or deleting our cookies has exactly one effect: you are signed out and stay signed out. Browsing the library without an account works fine with cookies blocked entirely.
Changes and contact
If the list above ever changes, the date at the top of this page moves with it. Questions go to contact@farmlymc.com or the contact page.
Ask directly. It goes straight to the person who runs Farmly.