2. Which cookies we use
In short: Only necessary cookies for login, security and your settings. We do not use analytics or advertising cookies.
2.1We use only technically necessary cookies and storage without which the website or a service you requested would not work (login, security, saving settings you chose). We do not use analytics or advertising cookies, we do not use tracking pixels and we do not track you across websites.
2.2StormHost cookies (set by us):
| Name | Purpose | Expiry |
|---|---|---|
| __Host-stormhost_customer | login to the customer account | expires after 72 hours of inactivity, at the latest 14 days after login |
| __Host-stormhost_cpending | customer account login in progress with two-factor authentication | 5 minutes |
| __Host-stormhost_stepup | confirmation of a sensitive action in the customer account (password or code entered again), so you don't have to enter it at every step | 10 minutes |
| __Host-stormhost_device | recognising a known device so we can alert you to a login from a new device; set at login, registration or password reset (random identifier, stored by us only as a one-way hash) | 180 days from the last login |
| __Host-stormhost_vbind | linking the e-mail verification link to the browser you registered in | 24 hours |
| __Host-stormhost_wa | signing in with or adding a passkey (binding the security challenge to your browser) | 1 hour |
| __Host-sh-dlink | linking your account with Discord (protection of the return from Discord); deleted as soon as you return | 10 minutes |
| stormhost-locale | the website language you chose yourself in the language switcher (Czech, English, Slovak, Polish or German); when you next open stormhost.eu without a language in the address, the website is shown in that language | 1 year from your choice |
| __Host-stormhost_session | administrator login (StormHost administrators only) | expires after 1 hour of inactivity, at the latest after 12 hours |
| __Host-stormhost_pending | administrator login in progress with two-factor authentication | 5 minutes |
| __Host-stormhost_preview | an administrator's preview of a customer account during support (only in the administrator's browser) | 30 minutes |
| sh-season-preview | preview of a seasonal website appearance (only in the administrator's browser) | 30 minutes |
| stormhost_customer, stormhost_session, stormhost_pending, stormhost_device | older names of the cookies above; we no longer set or use them and delete any remaining copies on your visit | – |
__Host-stormhost_customer
- Purpose
- login to the customer account
- Expiry
- expires after 72 hours of inactivity, at the latest 14 days after login
__Host-stormhost_cpending
- Purpose
- customer account login in progress with two-factor authentication
- Expiry
- 5 minutes
__Host-stormhost_stepup
- Purpose
- confirmation of a sensitive action in the customer account (password or code entered again), so you don't have to enter it at every step
- Expiry
- 10 minutes
__Host-stormhost_device
- Purpose
- recognising a known device so we can alert you to a login from a new device; set at login, registration or password reset (random identifier, stored by us only as a one-way hash)
- Expiry
- 180 days from the last login
__Host-stormhost_vbind
- Purpose
- linking the e-mail verification link to the browser you registered in
- Expiry
- 24 hours
__Host-stormhost_wa
- Purpose
- signing in with or adding a passkey (binding the security challenge to your browser)
- Expiry
- 1 hour
__Host-sh-dlink
- Purpose
- linking your account with Discord (protection of the return from Discord); deleted as soon as you return
- Expiry
- 10 minutes
stormhost-locale
- Purpose
- the website language you chose yourself in the language switcher (Czech, English, Slovak, Polish or German); when you next open stormhost.eu without a language in the address, the website is shown in that language
- Expiry
- 1 year from your choice
__Host-stormhost_session
- Purpose
- administrator login (StormHost administrators only)
- Expiry
- expires after 1 hour of inactivity, at the latest after 12 hours
__Host-stormhost_pending
- Purpose
- administrator login in progress with two-factor authentication
- Expiry
- 5 minutes
__Host-stormhost_preview
- Purpose
- an administrator's preview of a customer account during support (only in the administrator's browser)
- Expiry
- 30 minutes
sh-season-preview
- Purpose
- preview of a seasonal website appearance (only in the administrator's browser)
- Expiry
- 30 minutes
stormhost_customer, stormhost_session, stormhost_pending, stormhost_device
- Purpose
- older names of the cookies above; we no longer set or use them and delete any remaining copies on your visit
- Expiry
- –
All these cookies are only available over a secure connection. Except for stormhost-locale, they cannot be read by scripts on the page; stormhost-locale only contains the language code and is set directly by the language switcher.
2.3Browser storage (localStorage, sessionStorage for an order in progress):
| Key | Purpose | Expiry |
|---|---|---|
| stormhost-theme | the chosen website appearance (light or dark) | until deleted |
| stormhost-privacy, stormhost-privacy-intro, stormhost-privacy-lock | the mode hiding sensitive data on screen (e.g. when streaming), whether you have seen its introduction and whether you turned it off permanently in Account settings | until deleted; the lock is removed at logout |
| checkout:… | an order in progress and ticked options, so they are not lost when you log in (sessionStorage) | until the window is closed, at most 1 hour |
| sh-portal-shortcuts | single-key keyboard shortcuts turned off in the customer account | until deleted |
| sh-portal-nav-services, sh-portal-recent | whether the list of services in the side panel is expanded and recently opened items in the customer account (at most 5) | until logout |
| stormhost.svc-nav.collapsed | collapsed groups of tabs in the service detail | until deleted |
| stormhost.passkey.details | the account identifier, e-mail and name we last passed to the password manager for your passkeys, so that a change is sent to it only once | until you sign out |
| stormhost:looking-glass:recent, stormhost:cfx-resolver:recent, stormhost.mc-status.history.v1 | history of your recent queries in the website tools | until deleted (can be cleared in the tool) |
| stormhost:cfx-resolver:accounts | the “Linked accounts” display setting in the FiveM server tool | until deleted |
| stormhost.tools.passwords.v1 | password generator settings (the passwords themselves are not stored) | until deleted |
| stormhost.tools.discord-webhook.draft.v1, stormhost.tools.discord-webhook.url.v1 | a message in progress in the Discord webhook tool; the webhook address only if you explicitly tick saving it | until deleted |
| stormhost.tools.card-support.draft.v1, stormhost.tools.cable-label.draft.v2 | a design in progress in the card support tool and the cable label tool | until deleted |
| stormhost:editor-wrap | line wrapping setting in the file editor | until deleted |
| wiki-tab:… | the remembered tab in guides (e.g. Windows / Linux) | until deleted |
| wiki-feedback:… | your answer to “Was this guide helpful?” (not sent to the server) | until deleted |
| stormhost.admin.bgp.section | the last opened part of the network settings (administration only) | until deleted |
stormhost-theme
- Purpose
- the chosen website appearance (light or dark)
- Expiry
- until deleted
stormhost-privacy, stormhost-privacy-intro, stormhost-privacy-lock
- Purpose
- the mode hiding sensitive data on screen (e.g. when streaming), whether you have seen its introduction and whether you turned it off permanently in Account settings
- Expiry
- until deleted; the lock is removed at logout
checkout:…
- Purpose
- an order in progress and ticked options, so they are not lost when you log in (sessionStorage)
- Expiry
- until the window is closed, at most 1 hour
sh-portal-shortcuts
- Purpose
- single-key keyboard shortcuts turned off in the customer account
- Expiry
- until deleted
sh-portal-nav-services, sh-portal-recent
- Purpose
- whether the list of services in the side panel is expanded and recently opened items in the customer account (at most 5)
- Expiry
- until logout
stormhost.svc-nav.collapsed
- Purpose
- collapsed groups of tabs in the service detail
- Expiry
- until deleted
stormhost.passkey.details
- Purpose
- the account identifier, e-mail and name we last passed to the password manager for your passkeys, so that a change is sent to it only once
- Expiry
- until you sign out
stormhost:looking-glass:recent, stormhost:cfx-resolver:recent, stormhost.mc-status.history.v1
- Purpose
- history of your recent queries in the website tools
- Expiry
- until deleted (can be cleared in the tool)
stormhost:cfx-resolver:accounts
- Purpose
- the “Linked accounts” display setting in the FiveM server tool
- Expiry
- until deleted
stormhost.tools.passwords.v1
- Purpose
- password generator settings (the passwords themselves are not stored)
- Expiry
- until deleted
stormhost.tools.discord-webhook.draft.v1, stormhost.tools.discord-webhook.url.v1
- Purpose
- a message in progress in the Discord webhook tool; the webhook address only if you explicitly tick saving it
- Expiry
- until deleted
stormhost.tools.card-support.draft.v1, stormhost.tools.cable-label.draft.v2
- Purpose
- a design in progress in the card support tool and the cable label tool
- Expiry
- until deleted
stormhost:editor-wrap
- Purpose
- line wrapping setting in the file editor
- Expiry
- until deleted
wiki-tab:…
- Purpose
- the remembered tab in guides (e.g. Windows / Linux)
- Expiry
- until deleted
wiki-feedback:…
- Purpose
- your answer to “Was this guide helpful?” (not sent to the server)
- Expiry
- until deleted
stormhost.admin.bgp.section
- Purpose
- the last opened part of the network settings (administration only)
- Expiry
- until deleted
Data in browser storage stays on your device and is not sent to our server by itself; only what you submit yourself (e.g. an order) is sent.
3. Third-party cookies and services
In short: Cloudflare protects the website against attacks and bots. Payment gateways and some tools use their own cookies under their own policies.
3.1The website is delivered via the Cloudflare network, which protects it against attacks and bots. For this purpose Cloudflare inserts its own protective script into the pages and may set its own technically necessary cookies, for example __cf_bm (bot detection, 30 minutes), cf_clearance (after successfully verifying you are not a bot) or _cfuvid (rate limiting, for the session).
3.2On forms (registration, login and others) we use Cloudflare Turnstile protection. When the form loads, it evaluates technical browser data to tell a human from a bot. It is used only to protect the form you are trying to submit. More in Cloudflare's Turnstile privacy policy.
3.3Payments take place on the pages of the GoPay (until 23 December 2026) or PayU payment gateway, which use their own cookies under their own policies.
3.4Some tools display an image directly from a third-party server: the banner in the FiveM server tool loads only after you click it, from the address the server itself published. Your browser then connects to the server where the image is stored; that server sees your IP address and may use its own cookies under its own policies. Other images (the FiveM server owner's avatar, player heads and plugin icons) are downloaded by our server; your browser does not connect to third-party servers. In the Spark profile analysis, your browser downloads the profile whose link you paste directly from spark's storage (spark-usercontent.lucko.me), which sees your IP address.
3.5Trustpilot reviews. The home page has a link to our Trustpilot profile; you only connect to Trustpilot when you click it. The official Trustpilot widget with ratings loads from widget.trustpilot.com only after you click “Show rating” (by doing so you consent to loading it). Trustpilot (Trustpilot A/S, Denmark) then, as an independent controller, sees your IP address and browser data and may use its own cookies or storage within the widget under its own policies.
4. Consent
In short: By law, necessary cookies do not require consent. If we wanted to use others, we would ask you first.
4.1We may store information on your device or read it from it only with your prior consent. The exception is what is necessary to transmit a communication or to provide a service you have explicitly requested (section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications, as in force since 1 January 2022). StormHost cookies and storage under clause 2 and Cloudflare's protective cookies under clauses 3.1 and 3.2 are necessary, so we do not show a consent banner. If we wanted to use analytics or marketing cookies or other third-party tools that are not necessary in the future, we would ask for your consent in advance. Refusing will be as easy as accepting and you will be able to withdraw consent at any time.
5. Managing cookies
In short: You can delete cookies in your browser at any time. Without them, however, you cannot log in.
5.1You can delete or block cookies and storage at any time in your browser settings. After deleting cookies you will be logged out and on your next login you may receive a new-device alert. Without the necessary cookies you cannot log in to the customer account. You can also clear the query history directly in the tools.
6. More information
6.1How we process personal data (e.g. the IP address at login) is described in the Privacy Policy.
6.2This policy takes effect on 11 November 2026 (version 2026-11-11). We update it when the cookies we use change.