Cookie Policy

These are required for the platform to function and cannot be disabled without breaking core functionality. We keep the list intentionally short:

• Session & authentication: Supabase Auth session tokens that keep you signed in.
• Consent record: mf_cookie_consent in local storage, remembering your cookie choices so we don't ask again every visit.
• Preferences: local UI preferences (e.g. theme, reduced motion, notifications, onboarding state, and dismissed notices) stored under pref:* or mf_* keys. Their duration depends on the preference and lasts until reset or browser storage is cleared.

With your consent, we use product analytics to understand how the service is used and to improve it. This is the same "Analytics" category shown in the cookie banner — no cross-site tracking, no ad targeting, no selling of data. Depending on the deployment, this may be provided by one or both of:

• Plausible Analytics — its configured script is cookie-free and receives page paths and product events. We do not deliberately send names or email addresses through those events.
• Google Analytics 4 (GA4) — used only where explicitly configured for a given deployment, with IP anonymization enabled. Unlike Plausible, GA4 may set cookies and process identifiers to measure usage.

Both Plausible and, where enabled, GA4 are off by default. Neither loads until you explicitly opt in via the cookie banner, and both are immediately removed from the page if you withdraw consent.

With your separate consent — the "Ads measurement" category in the cookie banner — we use Google's conversion measurement to understand whether an ad brought you to the site and whether that visit led to a sign-up or a purchase. Technically this grants the Consent Mode signals ad_storage and ad_user_data and may set Google cookies such as _gcl_aw.

We do not use personalized ad targeting or remarketing: the ad_personalization signal always stays denied. This category is off by default, independent of the Analytics category, and withdrawing it removes the associated Google cookies from your browser.

EU/EEA consent rules and, for our German establishment, section 25 TDDDG generally require prior consent before optional information is stored on or read from your device. Storage strictly necessary for a service you requested does not require that consent. Analytics and ads measurement remain off until you opt in; declining is as easy as accepting, and you can withdraw your choice at any time using the button below.

You can review or change your consent choices at any time — no need to clear your browser data.

For details on what personal data we process and your rights, see our Privacy Policy. For platform rules, see our Acceptable Use Policy.