Cookie Policy

Cookies we set

Account session __Host-bcma_user

Keeps you signed in for up to 30 days, or until you sign out. In local development, it is named bcma_user.

Administrator session __Host-bcma_admin

Keeps an administrator signed in for up to 8 hours, or until they sign out. In local development, it is named bcma_admin.

Passkey challenge __Host-bcma_pk

Temporarily completes passkey registration or sign-in. It expires after 5 minutes and is removed after use. In local development, it is named bcma_pk.

Optional Discord authorization __Host-bcma_discord

Binds a Discord linking or sign-in attempt to your browser. It lasts up to 10 minutes and is removed on callback. In HTTP local testing it is named bcma_discord. It is set only when you initiate Discord authorization.

Contest device bcma_device

Helps the contest recognize a participant's device. It expires after one year.

Guest contests __Host-bcma_guest

Recognizes guest attempts in this browser for up to 30 days; starting another contest renews the cookie’s lifetime. Each result can only be claimed by an account within 24 hours of finishing. Renewing the cookie or returning to the site does not extend that deadline. The cookie is removed after attempts are claimed; unclaimed contest records may remain available to authorized organizers as described in the Privacy Policy. In local development, it is named bcma_guest.

These cookies support account and contest features. They are not used for advertising.

Discord signup also uses short-lived HttpOnly browser-binding and pending-signup cookies that expire after 10 minutes. They are used only to finish the signup you started.

When you choose Google sign-in, short-lived HttpOnly cookies bind authorization and unfinished signup to your browser. They expire after 10 minutes. These cookies do not enable reminders or store your Google password.

Browser storage

Local storage preserves unsaved answer drafts, answer edit times, and queued contest activity if a connection is interrupted. Session storage holds temporary contest notices and clipboard-related contest activity. Administrator editing drafts may also be saved locally in the administrator's browser. Some contest activity and performance measurements are sent to BCMA's server. Browser storage can remain until the app or browser clears it.

Cloudflare

Cloudflare hosts and protects this site. Depending on the security features enabled, it may set cookies needed to check or protect requests, such as cf_clearance or __cf_bm. See Cloudflare's cookie documentation for details.

When enabled, Cloudflare Web Analytics measures page views, referring websites, and performance without using analytics cookies or local storage. It is separate from the account, contest, and security cookies above. See website analytics in our Privacy Policy for details.

Your choices

You can delete or block cookies and browser storage in your browser settings. Blocking account or contest cookies may prevent sign-in, passkey use, or contest participation. Clearing browser storage may remove unsaved answer drafts.

Questions

Email support@bcma.xyz with questions about this policy.