What we set
| Cookie | Purpose | Duration |
|---|---|---|
mc_session | Signed session for the web UI (httpOnly, SameSite=Lax, Secure in prod). | 8 hours |
mc_csrf | CSRF double-submit token for HTML form posts. | 8 hours |
mc_lang | Remembers your preferred language (en/es). | 1 year |
What we do NOT use
- No advertising cookies. We don't run ads on the platform.
- No third-party analytics cookies (Google Analytics, Mixpanel, Segment, etc.). We use server-side aggregated metrics only.
- No social-media tracking pixels.
Embedded third-party scripts
A handful of scripts load from CDNs to deliver the UI itself:
cdn.tailwindcss.com— CSS frameworkunpkg.com— HTMX librarycdn.auth0.com— Sign-in (when you choose to log in)
These CDNs may receive your IP address as part of normal HTTP. They do not receive any of your business data.
Your choices
You can block all of these cookies in your browser settings. The session + CSRF cookies are required for the platform to function; blocking them will prevent sign-in.
