Cookies
Last updated: 15 October 2026
We use only what is strictly necessary to run our websites securely. There are no advertising, analytics or social-media tracking cookies. Because these cookies are essential, the law doesn't require a consent banner, but we still want you to know exactly what they are.
Cookies we set
| Name | Purpose | Lasts |
|---|---|---|
__Host-ach |
Keeps you signed in on that one site. It can't be read by scripts or by any other site. | Up to 7 days of inactivity (12 hours for administrators), 30 days at most |
__Host-csrf |
Protects forms against cross-site request forgery. | 12 hours |
__Host-mfa |
Remembers, for 5 minutes, that you passed the first sign-in step (password or passkey) while you enter your two-factor code. | 5 minutes |
__Host-dev |
On the accounts site only: a random value that lets us recognise a browser you have signed in with before, so we can email you when your account is used from a new one. It holds nothing about you or your device, and we store it only as a one-way hash. | About 13 months |
__Host-pk |
Only while you use a passkey: protects that step against replay. | 5 minutes |
ach-chat |
Only after you send a message in the chat bubble: lets the conversation continue on every Alpha Crews site and after you refresh. Shared by our sites (alphacrewshq.com and its subdomains) and can't be read by scripts. | 30 days from your last message |
ach-lang |
Remembers the language you chose, on all our sites. | 1 year |
__Host-goog |
Only during "Sign in with Google": protects that sign-in against forgery and replay. | 10 minutes |
__Host-gsignup |
Only when you create an account with Google: remembers your confirmed Google account while you choose a username. | 15 minutes |
Stored on your device only
| Name | Purpose |
|---|---|
ach-theme (local storage) |
Remembers whether you chose the light or dark theme. It is never sent to us. |
chat-open, chat-seen (local storage) |
Remember whether the chat panel was open and which replies you have already seen. Never sent to us. |
Set by others
- Cloudflare, which protects our sites, may set strictly necessary security cookies (for example to tell people from bots).
- YouTube videos embedded in privacy-enhanced mode may store data on your device when you play a video, under Google's privacy policy.
You can clear or block cookies in your browser settings. If you block the ones above, signing in won't work.