Elite Dangerous Field Manual:Cookie Policy: Difference between revisions
Update GA4 analytics cookie disclosure |
Align public policy commitments after drift audit |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 7: | Line 7: | ||
The cookie banner offers: | The cookie banner offers: | ||
* '''Accept all''' — enables necessary cookies and optional site-improvement/analytics cookies. | * '''Accept all''' — enables necessary cookies and optional site-improvement/analytics cookies. | ||
* ''' | * '''Save preferences''' — saves the optional categories you choose. At present, the optional category is '''Analytics'''. | ||
* '''Reject optional cookies''' — keeps only cookies/storage needed for security, login, account creation, and remembering your cookie choice. | * '''Reject optional cookies''' — keeps only cookies/storage needed for security, login, account creation, and remembering your cookie choice. | ||
Your cookie choice is stored in your browser's local storage. For server-side features that must know whether optional site-improvement cookies are accepted, EDFM may also set a small first-party consent signal cookie. | Your cookie choice is stored in your browser's local storage as purpose/category preferences: necessary cookies are always on, and the optional Analytics category can be allowed or rejected. Older saved optional-cookie choices are interpreted as the equivalent Analytics preference so EDFM can preserve visitor intent. For server-side features that must know whether optional site-improvement cookies are accepted, EDFM may also set a small first-party consent signal cookie. | ||
Sensitive account, authentication, Frontier OAuth, and user/profile pages are excluded from Google Analytics regardless of cookie choice. Consent can enable Analytics only on pages that are otherwise eligible for public anonymous analytics. | Sensitive account, authentication, Frontier OAuth, and user/profile pages are excluded from Google Analytics regardless of cookie choice. Consent can enable Analytics only on pages that are otherwise eligible for public anonymous analytics. | ||
{{EDFM policy commitments}} | |||
== Strictly necessary cookies == | == Strictly necessary cookies == | ||
| Line 25: | Line 27: | ||
|- | |- | ||
| Cloudflare/Turnstile cookies or browser checks || Security, bot/spam prevention, and abuse protection on login/account forms. || Controlled by Cloudflare/security flow | | Cloudflare/Turnstile cookies or browser checks || Security, bot/spam prevention, and abuse protection on login/account forms. || Controlled by Cloudflare/security flow | ||
|- | |||
| Frontier OAuth login/session state || Temporary authentication state used when a visitor chooses '''Sign in with Frontier''', including anti-forgery state values for the OAuth callback. OAuth codes/tokens are handled server-side for login and are not optional Analytics cookies. || Login flow/session only | |||
|} | |} | ||
== Optional | == Optional Analytics cookies == | ||
These help improve navigation, search, public content, and trending/sidebar behavior. | These help improve navigation, search, public content, and trending/sidebar behavior. | ||
| Line 37: | Line 41: | ||
| <code>edfmCookieAnalytics</code> || First-party consent signal used so server-side EDFM code knows optional site-improvement/analytics cookies are allowed. || About 180 days, or until changed/rejected | | <code>edfmCookieAnalytics</code> || First-party consent signal used so server-side EDFM code knows optional site-improvement/analytics cookies are allowed. || About 180 days, or until changed/rejected | ||
|- | |- | ||
| <code>_ga</code> and | | <code>_ga</code> and <code>_ga_4VJHJ06777</code> (matching the GA4 measurement ID currently used by EDFM) || Google Analytics 4 uses these only after optional site-improvement cookies are accepted, on eligible public pages, to distinguish visits/devices for aggregate site-usage analytics. EDFM does not use them for advertising features and does not intentionally send account identifiers to Google Analytics. || Controlled by Google Analytics; commonly up to about 2 years unless cleared or limited by browser settings | ||
|} | |} | ||
If | If the Analytics category is rejected, EDFM should not set <code>edfmPopularSearch</code>. Aggregate page-view counts for Trending Guides may still be collected as first-party site functionality without storing visitor IP, username, or account ID in the Trending Guides tables. | ||
== Google Analytics scope == | == Google Analytics scope == | ||
| Line 53: | Line 57: | ||
== Third-party requests == | == Third-party requests == | ||
EDFM pages may link to outside sites. Login and account pages may load Cloudflare Turnstile from <code>challenges.cloudflare.com</code>. Eligible public pages may load Google Analytics from <code>www.googletagmanager.com</code> and send analytics requests to Google Analytics collection endpoints such as <code>www.google-analytics.com</code> and regional Google Analytics endpoints. External sites, Cloudflare, and Google have their own policies. | EDFM pages may link to outside sites. Login and account pages may load Cloudflare Turnstile from <code>challenges.cloudflare.com</code>. If you choose '''Sign in with Frontier''', your browser is sent to Frontier's authentication service and then returned to EDFM's callback page. Eligible public pages may load Google Analytics only after optional site-improvement cookies are accepted from <code>www.googletagmanager.com</code> and send analytics requests to Google Analytics collection endpoints such as <code>www.google-analytics.com</code> and regional Google Analytics endpoints. External sites, Cloudflare, Frontier, and Google have their own policies. | ||
== Changing your choice == | == Changing your choice == | ||
Latest revision as of 13:56, 21 August 2026
This page explains EDFM's cookies and browser storage.
Summary
EDFM uses first-party cookies/local browser storage needed for login/security, preferences, and optional site-improvement features. EDFM also uses Google Analytics 4 on eligible public pages for anonymous public-content analytics. EDFM does not use advertising cookies, cross-site marketing cookies, Meta Pixel, session replay, Google Signals, remarketing, enhanced conversions, Google Ads audiences, AdSense, or advertising personalization.
Cookie choices
The cookie banner offers:
- Accept all — enables necessary cookies and optional site-improvement/analytics cookies.
- Save preferences — saves the optional categories you choose. At present, the optional category is Analytics.
- Reject optional cookies — keeps only cookies/storage needed for security, login, account creation, and remembering your cookie choice.
Your cookie choice is stored in your browser's local storage as purpose/category preferences: necessary cookies are always on, and the optional Analytics category can be allowed or rejected. Older saved optional-cookie choices are interpreted as the equivalent Analytics preference so EDFM can preserve visitor intent. For server-side features that must know whether optional site-improvement cookies are accepted, EDFM may also set a small first-party consent signal cookie.
Sensitive account, authentication, Frontier OAuth, and user/profile pages are excluded from Google Analytics regardless of cookie choice. Consent can enable Analytics only on pages that are otherwise eligible for public anonymous analytics.
EDFM policy commitments — quick reference
- Operator/contact: Elite Dangerous Field Manual (EDFM) is operated as an independent community project. For policy, privacy, copyright, licensing, or site-operation questions, contact
[email protected]. - Unofficial status: EDFM is not affiliated with, operated by, sponsored by, endorsed by, or reviewed by Frontier Developments plc. Frontier names, marks, game assets, and imagery remain Frontier's or their owners' property.
- Accounts, edits, and uploads: Anyone may create an account. Logged-in users may edit pages. Logged-in users may upload permitted image types subject to file type, size, rate-limit, licensing, moderation, and anti-abuse rules. Anonymous uploads remain disabled. EDFM may later restrict account creation, editing, or uploads for spam, security, abuse-prevention, legal, or moderation reasons.
- Age: EDFM is not intended for children under 13. If you are under 13, do not create an account or provide personal information.
- Contribution license: Unless a page clearly says otherwise, original text submitted to EDFM is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA 4.0). Frontier-owned game material, third-party material, trademarks, personal information, EDFM software/infrastructure, and EDFM branding are not relicensed by that text license.
- Personal data and advertising: EDFM does not sell personal information and does not share personal information for behavioural advertising. EDFM does not use advertising cookies, cross-site marketing cookies, remarketing, enhanced conversions, Google Ads audiences, AdSense, Meta Pixel, session replay, or ad-personalisation features. Optional Google Analytics is used only after Analytics consent on eligible public pages and is excluded from sensitive account, authentication, Frontier OAuth, and profile pages.
- Account removal and public history: If account removal is requested, EDFM's normal approach is to disable or rename the account where appropriate while preserving public edits, file history, logs, and other records needed for attribution, licensing, moderation, security, legal compliance, and wiki integrity.
- Logs and backups: Operational logs are intended to rotate at about 60 days unless longer retention is temporarily needed for abuse, security, outages, or legal reasons. EDFM takes daily backups; removed or changed data may remain in already-created backups until those backups expire under the backup schedule.
- Cookies and consent: Necessary cookies/storage support login, security, account creation, preferences, and cookie-choice handling. Optional Analytics/site-improvement cookies are controlled through Cookie Preferences. Rejecting optional cookies should not prevent ordinary reading.
- Frontier login and CAPI: Normal Frontier sign-in is for account login/linking only and requests
auth, not Companion API (capi) access. Commander-name verification is a separate optional Preferences action; choosing Attach CMDR Name requestsauth capi, reads the Commander name once, and keeps that Commander name private by default unless the user later enables public display.
Strictly necessary cookies
These are needed for core site operation and cannot be disabled through the banner without breaking login/security features.
| Name | Purpose | Typical duration |
|---|---|---|
edwiki_session |
MediaWiki session/login/account/security state. | Session |
| MediaWiki login/token/user preference cookies | Login state, account preferences, edit tokens, and normal MediaWiki functionality for logged-in users. | Session to persistent, depending on MediaWiki and user choices |
| Cloudflare/Turnstile cookies or browser checks | Security, bot/spam prevention, and abuse protection on login/account forms. | Controlled by Cloudflare/security flow |
| Frontier OAuth login/session state | Temporary authentication state used when a visitor chooses Sign in with Frontier, including anti-forgery state values for the OAuth callback. OAuth codes/tokens are handled server-side for login and are not optional Analytics cookies. | Login flow/session only |
Optional Analytics cookies
These help improve navigation, search, public content, and trending/sidebar behavior.
| Name | Purpose | Typical duration |
|---|---|---|
edfmPopularSearch |
Temporarily remembers a search term so EDFM can count which article a visitor lands on after a broad search, powering aggregate Trending Guides behavior. | About 30 minutes |
edfmCookieAnalytics |
First-party consent signal used so server-side EDFM code knows optional site-improvement/analytics cookies are allowed. | About 180 days, or until changed/rejected |
_ga and _ga_4VJHJ06777 (matching the GA4 measurement ID currently used by EDFM) |
Google Analytics 4 uses these only after optional site-improvement cookies are accepted, on eligible public pages, to distinguish visits/devices for aggregate site-usage analytics. EDFM does not use them for advertising features and does not intentionally send account identifiers to Google Analytics. | Controlled by Google Analytics; commonly up to about 2 years unless cleared or limited by browser settings |
If the Analytics category is rejected, EDFM should not set edfmPopularSearch. Aggregate page-view counts for Trending Guides may still be collected as first-party site functionality without storing visitor IP, username, or account ID in the Trending Guides tables.
Google Analytics scope
Google Analytics is used only for eligible public pages and public search analytics. It may collect ordinary page/event data such as page URL, page title, referrer, traffic source, browser/device information, scrolls, outbound clicks, downloads, and public search engagement.
EDFM's Analytics integration is configured not to emit the GA tag on login, logout, account creation, password reset/recovery, email confirmation, credential changes, preferences/account settings, Frontier/PluggableAuth login or callback pages, old revisions, diffs, redirects, non-existent pages, MediaWiki User:/User talk: pages, equivalent profile/commander-style pages, or requests containing sensitive authentication/account parameters.
EDFM does not intentionally send MediaWiki usernames, MediaWiki numeric user IDs, email addresses, CMDR names, Frontier/FDev identifiers, Discord IDs, OAuth codes, access tokens, refresh tokens, session identifiers, cookies, or comparable account-specific identifiers to Google Analytics.
Local storage
EDFM uses browser local storage to remember the cookie banner choice. Local storage stays in your browser until you clear it or change your cookie preferences.
Third-party requests
EDFM pages may link to outside sites. Login and account pages may load Cloudflare Turnstile from challenges.cloudflare.com. If you choose Sign in with Frontier, your browser is sent to Frontier's authentication service and then returned to EDFM's callback page. Eligible public pages may load Google Analytics only after optional site-improvement cookies are accepted from www.googletagmanager.com and send analytics requests to Google Analytics collection endpoints such as www.google-analytics.com and regional Google Analytics endpoints. External sites, Cloudflare, Frontier, and Google have their own policies.
Changing your choice
You can change your choice from the cookie banner/preferences control when available, or by clearing site data for edfieldmanual.com in your browser.
Contact
Questions about cookies or privacy: [email protected].