Last updated November 2, 2026
Cookie Policy
Stram only uses cookies that the site needs to work. We don't use advertising, tracking or analytics cookies, so there's nothing to accept or reject.
1. Cookies we use
| Cookie | What it does | Kept for |
|---|---|---|
| stram_session | Keeps you signed in. Signed so it can't be faked and can't be read by page scripts. | 30 days |
| stram_csrf | Protects the sign-in forms from being submitted by other websites. | 7 days |
| stram_pending_2fa | Remembers that your password was right while you type the 6-digit email code. | 10 minutes |
| stram_pending_signup, stram_auth_intent, Lunar_oauth_state_* | Make Google, Discord and GitHub sign-in work safely. | 10 minutes |
| mcp_oauth_*, oauth_state_* | Keep apps you connect (like GitHub or Google Drive) connected. Removed when you sign out. | Up to 30 days |
| stram_discord_link, stram_discord_result | Link your Discord profile card. | Minutes |
| stram_ref, stram_joined_via | Credit the friend who invited you, if you used an invite link. | Up to 30 days |
2. Other storage on your device
Stram also keeps some settings and a copy of your chats in your browser's local storage, so the app loads fast and works offline for a moment. It's only readable by Stram on your device and is cleared if you delete your account.
3. Third parties
Cloudflare's human check (Turnstile) runs on the sign-in pages to block bots. It doesn't use advertising cookies. Profiles that use a custom font load it from Google Fonts.
4. Your choices
You can block or delete cookies in your browser settings, but you won't be able to sign in without the essential ones.
5. Contact
Message us on TikTok at @stram.lol. We reply within 30 days, usually much sooner.