1. Scope and technologies
This policy covers gamehut.net, client.gamehut.net and panel.gamehut.net. Cookies are small browser records; similar technologies include local storage, session storage and security scripts. Rules apply to their purposes, not only to whether a record is named a cookie. Inventory reflects our source and browser audit on 8 October 2026; third-party security behaviour can vary by request, and authenticated functions may add records when used.
Back to contents ↑2. Strictly necessary and security records
| Site / record | Purpose | Duration / control |
|---|---|---|
| Client: gamehut_client_session; panel: pterodactyl_session | Account sessions, login state and secure navigation | Client normally 120 minutes; panel normally 720 minutes of inactivity; browser/session settings and renewed activity affect expiry |
| Client/panel: XSRF-TOKEN | Protect form and account requests from cross-site request forgery | Normally aligned with the session |
| Client: paymenter_remember; panel: remember_web_* where “remember me” is selected | Keep the login you expressly request | Client remember-me token normally 30 days; panel framework persistent expiry potentially up to 400 days subject to browser limits. Clear cookies/sign out to remove |
| Cloudflare: cf_clearance, __cf_bm or related challenge/security records, where issued | Distinguish legitimate traffic and complete a security challenge | Provider/configuration dependent; __cf_bm normally expires after 30 minutes of inactivity, challenge clearance depends on settings |
| Website: gamehut_cookie_choice_v1 | Remember the optional-storage choice | Local storage until cleared or replaced; choice rechecked when its version changes |
These functions are necessary for a requested account/security service or to remember a privacy choice. They are not advertising consent. Blocking them may prevent login, forms or security challenges from working. Session cookies are host-specific; signing in to one site does not create a shared unrestricted login cookie across all sites.
Back to contents ↑3. Preferences and browser storage
| Record | Purpose | Duration / choice |
|---|---|---|
| gamehut-country-v1 | Website currency country preference | Session storage; cache validity is set by currency configuration, currently 30 minutes; created only after optional conversion is allowed |
| gamehut-rates-v1 | Website exchange-rate cache | Local storage; cache validity currently 24 hours, retained until replaced/cleared; optional conversion choice controls use |
| Panel: gamehut:blur-server-ips:v1 and interface preference records | Requested IP masking and interface choices | Local storage until cleared/changed; used for the selected interface function |
| Panel file-editor draft records | Preserve an in-progress edit within the browser session | Session storage, removed when the edit is saved/cleared or the session ends; may contain your draft text |
Currency conversion sends a country lookup to country.is and rate requests to ExchangeRate-API after you allow it. If you decline, real base prices remain available. Panel preferences needed for a function you request are handled as part of that function; contact support about an unexpected record.
Back to contents ↑4. Analytics, marketing and external services
Our audited public website, registration page and panel login did not reveal GameHut-installed analytics or advertising cookies/scripts. This is an audit finding, not a guarantee that every provider flow or future authenticated feature sets no additional record. We reassess purpose and legal requirements before adding optional tracking.
Payment pages may load Stripe security/payment technology when a payment method is requested, and PayPal applies its own notice when selected. External font requests disclose normal connection information to the font host, even without cookies. Following a Discord or other external link moves you to that provider’s site. Required consent or an applicable lawful storage exception must be established before additional non-essential storage/access is used; marketing consent is not bundled into Terms acceptance.
Back to contents ↑5. Manage your choices
On the website, use to allow or decline optional currency conversion. Both choices leave essential functions available. You can change your choice at any time; declining clears the currency cache and stops future optional currency requests after the page refreshes. Existing third-party requests cannot be undone. This choice applies to gamehut.net; it does not grant consent on an external provider’s website.
You can inspect, block or delete cookies and storage in browser settings. Clearing the privacy-choice record causes the choice to be requested again; clearing necessary account cookies may sign you out. Some preferences are stored until manually cleared rather than expiring like cookies. We do not use silence or continued browsing as consent where consent is required.
Back to contents ↑6. Questions and updates
Contact [email protected] for a cookie/privacy question or complaint. We review the inventory after integration changes and update this policy and consent controls where necessary. The Privacy Policy explains information use, rights and the complaint process. This policy does not limit non-excludable statutory rights.
Back to contents ↑