Effective 2026-05-19

Cookie Notice

30-second summary: We use the minimum cookies needed to keep you signed in, prevent CSRF, remember your language, and protect against abuse. No advertising or third-party tracking cookies.

What we set

CookiePurposeDuration
mc_sessionSigned session for the web UI (httpOnly, SameSite=Lax, Secure in prod).8 hours
mc_csrfCSRF double-submit token for HTML form posts.8 hours
mc_langRemembers your preferred language (en/es).1 year

What we do NOT use

  • No advertising cookies. We don't run ads on the platform.
  • No third-party analytics cookies (Google Analytics, Mixpanel, Segment, etc.). We use server-side aggregated metrics only.
  • No social-media tracking pixels.

Embedded third-party scripts

A handful of scripts load from CDNs to deliver the UI itself:

  • cdn.tailwindcss.com — CSS framework
  • unpkg.com — HTMX library
  • cdn.auth0.com — Sign-in (when you choose to log in)

These CDNs may receive your IP address as part of normal HTTP. They do not receive any of your business data.

Your choices

You can block all of these cookies in your browser settings. The session + CSRF cookies are required for the platform to function; blocking them will prevent sign-in.