Cookies & storage
3d4.life uses one cookie and one local-storage flag. That's it.
Session cookie
Set when you sign in or register. It's a signed Flask session cookie containing your numeric user id, signed with a server secret so it can't be forged. Lives for 30 days. Used to keep you logged in so you can download files and upload your own.
HttpOnly— not readable from JavaScriptSecure— only sent over HTTPSSameSite=Lax— not sent on cross-site POSTs
Cookie banner acknowledgement
Stored in your browser's localStorage as 3d4life:cookie-ack. Either accept or reject, depending on which button you clicked. We use it only to stop showing the banner again.
What we don't use
No analytics or tracking cookies. No third-party ad cookies. No fingerprinting. The site has no third-party scripts other than Three.js fetched from a public CDN, which doesn't set cookies.