Cookie Policy
Last updated: 20 October 2026
This page lists every cookie and browser storage key (local storage and session storage) VPZONE uses. Essential items are needed for the site to work and are always on. Preference items stay on your device. Advertising cookies are only placed with your consent.
Essential
| Name | Type | Party / purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Cookie | VPZONE — Keeps you signed in (HTTP-only) | Up to 30 days |
| vpz_consent | Cookie | VPZONE — Remembers your cookie choice (ads:1 or ads:0) so the server respects it | 1 year |
| vpz-consent-v2 | Local storage | VPZONE — Your cookie choice and its date | Until changed or cleared |
| vpz-cookie-consent | Local storage | VPZONE — Old cookie-banner key from before the current banner; never read, deleted when you save a choice | Deleted at your next choice |
| vpz_cache_reset | Cookie | VPZONE — Forces a one-time clear of your browser cache for vpzone.tv after a hosting change, so outdated copies of pages and images don't linger (sign-in and settings are kept) | 1 year |
| OAuth state (Google, Twitch, Kick, YouTube, Discord, TikTok), gf_oauth_state, gf_pkce_verifier | Cookie | VPZONE — Security (CSRF/PKCE) while connecting an account | A few minutes |
| vpz_restream_kick_oauth, vpz_restream_twitch_oauth, vpz_restream_youtube_oauth, vpz_ps5_twitch_oauth, vpz_ps5_twitch_chat_oauth | Cookie | VPZONE — Security (CSRF) while connecting Kick, Twitch or YouTube as a multistream destination, or Twitch for PS5 streaming and its chat | 10 minutes |
| vpzone_ref, vpzone_team_ref | Cookie | VPZONE — Credits the person or team that invited you when you sign up | 30 days |
| vpz-age-consent | Local storage | VPZONE — Remembers that you confirmed a mature-content warning on a stream | 30 days |
| vpz-tos-gate-later | Local storage | VPZONE — When you pressed "Later" on the updated Terms reminder, so it waits 24 hours before asking again | Until cleared |
| vpz-arcade-token:<clientId> | Local storage | VPZONE — Arcade embedded on a partner site: your Arcade sign-in token, visible only inside that site's frame | Until the token expires |
| vpz-arcade-pending:<clientId> | Session storage | VPZONE — Arcade embed sign-in in progress (PKCE security code) | Until sign-in ends or the tab is closed |
| oauth_secret_<clientId> | Session storage | VPZONE — Developers: shows a newly created OAuth app secret once | Deleted as soon as shown |
| vpz_chunk_reload | Session storage | VPZONE — Reloads the page once if a site update interrupted loading, without looping | Until the tab is closed |
| vpz-deletion-gate-dismissed | Session storage | VPZONE — You closed the pending account-deletion notice for this visit | Until the tab is closed |
| Cloudflare (__cf_bm, Turnstile) | Cookie | Cloudflare — Bot protection on the site and on signup/login | 30 minutes to session |
Preferences (stay on your device)
| Name | Type | Party / purpose | Duration |
|---|---|---|---|
| vpzone_watch_history | Local storage | VPZONE — Last 10 channels you watched, shown back to you | Until cleared |
| vpz_stream_region | Local storage | VPZONE — Video server region you picked | Until cleared |
| vpz_cushion, vpz_burst_cushion:<slug> | Local storage | VPZONE — Player buffering profile learned from your connection (and per channel) so live video doesn't stall | 1 hour / 15 minutes |
| vpz-legal-lang, vpz-theme, vpz-locale | Local storage | VPZONE — Language and light/dark theme | Until cleared |
| vpz-chat-msg-sound, vpz-chat-msg-volume, vpz-xp-sound, vpz_like_sound_muted | Local storage | VPZONE — Chat, likes and sound settings | Until cleared |
| vpz_popup_dismissed | Local storage | VPZONE — Limits how often the VPZONE+ invitation is shown (not again for 14 days after you close it) | Until cleared |
| vpz_popup_closed | Session storage | VPZONE — VPZONE+ invitation closed for this visit | Until the tab is closed |
| vpzone_pwa_dismiss, onboarding_dismissed, vpzone:sidebar-collapsed | Local storage | VPZONE — Remembers banners you closed and sidebar layout | Until cleared |
| vpz_dismissed_alerts, vpz_pw_nudge_dismissed, vpz-beta-welcome-dismissed | Local storage | VPZONE — Site announcements, the "add a password" reminder and the beta welcome banner you closed | Until cleared |
| vpz_celeb_seen_<kind> | Local storage | VPZONE — One-time celebrations (milestones) you have already seen | Until cleared |
| vpz:costream-layout, vpz:costream-order | Local storage | VPZONE — Co-stream layout and order of players you picked | Until cleared |
| vpz.ingest.protocol | Local storage | VPZONE — Streamers: ingest protocol (RTMPS or SRT) shown in the dashboard | Until cleared |
| vpz_preroll_done:<slug>, vpz_preroll_done:vod:<id> | Session storage | VPZONE — The pre-roll already played for this channel or replay, so it isn't repeated during your visit | Until the tab is closed |
| vpz:clips:visited | Session storage | VPZONE — Clips watched during this visit, so auto-play doesn't loop | Until the tab is closed |
| vpz:costream-dismissed | Session storage | VPZONE — Co-stream invitations you hid for this visit | Until the tab is closed |
| vpz_pulse_first_tick | Session storage | VPZONE — Shows the first Pulse reward celebration only once per visit | Until the tab is closed |
| /sw.js | Service worker | VPZONE — Receives web push notifications — installed only if you turn on notifications | Until you clear site data |
Advertising (consent required)
| Name | Type | Party / purpose | Duration |
|---|---|---|---|
| IDE, __gads, __gpi, __eoi, __gsas, _gcl_au, test_cookie and other Google cookies | Cookie | Google (AdSense, Ad Manager, IMA) — USA — Serve, personalize and measure ads — only after you accept advertising cookies; never for minors or VPZONE+ members. If you withdraw, VPZONE deletes the ones set on vpzone.tv | Up to 13 months |
| FCCDCF, FCNEC | Cookie | Google (Funding Choices) — USA — Your answers to Google's consent dialog (EEA, UK, Switzerland) — only after you accept advertising cookies | Up to 13 months |
| Google ad storage keys | Local storage | Google (AdSense, Funding Choices) — USA — Ad settings, frequency and consent-dialog state written by Google's libraries — only after you accept advertising cookies | Set by Google, until cleared |
Performance measurement (no cookies)
| Name | Type | Party / purpose | Duration |
|---|---|---|---|
| Cloudflare Web Analytics | No cookie or storage | Cloudflare — USA — Cookieless performance measurement: page load timings, page URL, referrer, browser and country (derived by Cloudflare from your IP address). No cookie, no storage on your device, no cross-site tracking, no individual profile | Nothing stored on your device |
House ads (no consent needed)
Without advertising consent, minors and signed-out visitors who refused see only VPZONE's own house ads, served from ads.vpzone.tv (Revive) with its visitor-identifier cookie disabled, or no ad at all.
How consent works (everywhere)
On your first visit a banner offers "Accept all", "Refuse" (same size and prominence) and "Customize". Until you choose, and if you refuse, no Google ad script, IMA, Ad Manager tag or third-party ad cookie is loaded. The same rule applies in Québec, the rest of Canada and every other country; in the EEA, UK and Switzerland, Google's certified consent dialog may also be shown. If your browser sends Global Privacy Control (GPC), we treat it as a refusal: advertising stays off whatever was chosen before, and the banner does not ask you.
Apart from Cloudflare Web Analytics (cookieless, described above), VPZONE uses no analytics or tracking tool: no Google Analytics, Meta Pixel or TikTok Pixel. VPZONE does not sell your data.
Changing or withdrawing your choice
Use the "Cookie preferences" link in the footer at any time to reopen the panel. Withdrawing stops advertising cookies from being read or set from then on; you can also delete cookies in your browser settings (this signs you out and resets preferences).
Payments (Stripe)
Paid actions open Stripe's hosted checkout, which sets its own cookies on Stripe's domain under Stripe's cookie policy. stripe.com/legal/cookies-policy