// / Policies & your rights
Cookie & storage policy
Updated 5 November 2026 · Version 2026-11-05
Your choices
Essential storage supports features you request. Optional Discord avatar requests stay off until allowed. You can reject optional media as easily as allow it and revisit at any time. Changing your choice blocks future optional image loads; it cannot undo a request already sent. No advertising or analytics SDK is enabled. Global Privacy Control keeps optional requests off.
Storage inventory
| Item | Purpose | Lifetime/category |
|---|---|---|
| yay_program_session | Private Discord-linked website session; secure, HTTP-only | 7 days · essential when signed in |
| __Host-yay_guest_session | Protects guest receipt/key access; secure, HTTP-only | 1 year · essential for guest checkout |
| YAY arcade session | Progress, reward eligibility and abuse prevention when requesting event features | Up to 90 days · requested feature |
| Cart and creator-code local storage | Remember selected products and the code you choose | Until changed/cleared · essential cart function |
| yay-privacy-choice-v1 | Remember allowed/rejected optional media | 180 days · essential preference |
| Optional Discord avatars | Images requested from Discord CDN after consent | Browser cache/provider controls · optional external request |
Payments and third-party pages
Opening Stripe Checkout, Discord or TikTok takes you to a separate provider. They may set their own payment/security/other cookies under their policies. YAY does not load their embedded advertising widgets in ordinary pages. Cloudflare may use security cookies when needed to protect requested traffic; see Cloudflare’s cookie information. Browser software/extensions can create requests outside our controls.
Clear or withdraw
Use Privacy controls to clear the cart and creator code from this browser, or your browser settings to clear all site data. Clearing cookies can remove access to a guest receipt; save your purchase to a verified account first or contact support. Withdrawing optional consent does not cancel a subscription. New optional tracking must be reviewed and blocked pending fresh consent; the banner does not authorise unknown future SDKs.