ManaMatesManaMates

No mystery trackers

Cookie & Storage Policy

ManaMates currently does not use advertising or cross-site tracking cookies. This page also explains local storage, because it matters even though it is technically not a cookie.

Last updated 2 August 2026Version 1.0

1. Current cookie status

ManaMates currently does not intentionally set non-essential analytics, advertising or tracking cookies. Because only essential application storage is currently used, there is no consent banner. A banner is not a substitute for this policy and will be added before any technology requiring consent is enabled.

2. Browser storage we use

TechnologyPurposeTypical duration
Essential HttpOnly cookies — access and refresh sessionsAuthenticates requests and securely rotates your signed-in session. Browser scripts cannot read these token cookies.Access cookies last about 15 minutes; refresh cookies up to 30 days unless you sign out or revoke the session.
Local storage — account summary and session labelShows the signed-in username and identifies this device in your session list. It contains no access or refresh token.Until sign-out or browser clearing.
Temporary in-memory interface stateKeeps open chats, drafts and current controls usable while the page is open.Usually until the tab is closed or refreshed.

The authentication cookies are host-only, HttpOnly and SameSite-restricted, and use Secure transport in production. Local storage is readable by website scripts, so ManaMates limits it to non-secret interface metadata and does not use it for advertising profiles.

3. Third-party resources

ManaMates loads card metadata, images and price information from Scryfall. Those requests can reveal technical data such as your IP address and browser information to Scryfall. ManaMates does not control whether an independent third party uses strictly necessary technology on its own domain.

Fonts used by the site are bundled during the application build and are not intentionally requested from Google by each visitor.

4. Your choices

You can remove ManaMates cookies and local storage through your browser settings. Removing the authentication cookies signs you out; neither action deletes server-side account content. Use the privacy contact for an account-data request.

Blocking essential cookies prevents login from working. Refusing any future optional analytics or tracking technology will not prevent normal use of ManaMates.

5. Future cookies and changes

If ManaMates introduces optional analytics, embedded media or tracking, we will first update this table and—where required—ask through a clear choice with optional categories disabled by default. Consent will be as easy to withdraw as it is to give.

Questions can be sent to the contact route on our Legal page.