Cookie Notice

Public website

The public website does not set advertising, personalization, or social-media cookies. It does use the necessary hcmn_store session cookie on store, product, basket, and checkout-return pages. The website does not include a public account system or consent-dependent advertising technology.

Cloudflare can automatically add its Web Analytics performance beacon to public pages. The beacon is described in the Privacy Policy and is separate from the store session cookie. Standard server logs are not cookies. Google Fonts does not set cookies through its Web API, according to Google, although font requests transmit the technical information described in the Privacy Policy.

Store basket session cookie

The hcmn_store cookie identifies a server-side basket session. The cookie itself is a random session identifier; selected product identifiers, coupon state, security token, and Minecraft username are stored on the server. It has a browser-session lifetime, is HttpOnly, uses SameSite=Lax so the Stripe return flow works, and is marked Secure over HTTPS.

This cookie is necessary to add or remove items, apply coupons, protect checkout requests, remember the submitted username, and clear the basket after checkout. Blocking it prevents the basket and checkout from working.

Stripe-hosted checkout

When you continue to Stripe Checkout or the Stripe customer billing portal, you leave hardcoreminecraft.net and interact with Stripe’s hosted pages. Stripe can use cookies or similar technologies for payment processing, recurring billing, email-based portal authentication, fraud prevention, security, saved-payment features such as Link, and preferences under Stripe’s own notices.

The Network does not control Stripe-domain cookies through this website’s cookie settings. Review Stripe’s privacy and cookie information before checkout if you want more detail.

Administrator session cookie

The restricted administration area uses a session cookie named “hcmn_control.” Its purpose is to maintain an authenticated administrator session and protect content-management requests. It is strictly necessary for the private control area and is not used for advertising or public visitor analytics.

The cookie has a session lifetime, is inaccessible to client-side scripts through HttpOnly, uses SameSite=Strict, and is marked Secure whenever the site is served over HTTPS. Administrator sessions also expire after a period of inactivity.

Local draft recovery

The administrator post editor can store a temporary recovery draft in browser local storage. Local storage is not transmitted with every page request like a cookie. The draft stays on the administrator’s device and can include unpublished title, summary, article, and editor-field content.

The editor provides a control to clear the recovery copy. Clearing the site’s browser data will also remove it. Administrators should not use shared or untrusted devices for unpublished material.

Browser controls

Most browsers allow cookies and local storage to be inspected, blocked, or deleted. Blocking hcmn_store prevents basket checkout, and blocking hcmn_control prevents administrator login. Blocking Google’s font domains may cause fallback fonts to display but should not prevent access to written content.

Because no optional public cookies are currently used, the public website does not display a cookie-consent banner. A consent mechanism and updated notice will be added before any consent-dependent advertising, analytics, or similar technology is introduced.

Updates

This Notice may be updated when the website’s storage practices change. The effective date shown above identifies the current version. The Privacy Policy provides additional details about technical logs, external fonts, retention, security, and privacy rights.