1. What we mean by cookies
"Cookies" are small text files stored on your device when you visit a website. We use the term here to cover related technologies too — localStorage, sessionStorage, and first-party pixels served from our own domain.
2. Categories we use
- Strictly necessary — required for sign-in, security, and core site functionality. These cannot be turned off without breaking the site.
- Functional — remember preferences such as your theme choice.
- Analytics — help us understand traffic and how features are used, in aggregate, through our own first-party analytics. No third-party analytics vendor receives your data. On our partner and member landing pages we record how the page is used (time on page, how far you scroll, video plays, which form fields you click into, and whether the form was sent), with your device type, country and the ad campaign that brought you. We never record what you type. This is not collected in the EU, UK, Switzerland or the EEA, nor when your browser sends a Global Privacy Control or Do Not Track signal.
- Attribution — record the partner whose link you arrived from so commissions can be paid correctly.
- Marketing — measure the effectiveness of specific campaigns (UTM parameters). We do not run cross-site behavioral-advertising tags on the site.
3. Full inventory
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| sb-<project>-auth-token | madtide (first-party) / Supabase | Keeps you signed in to your account. | 1 year (rotates on each sign-in) | Strictly necessary |
| mt_consent | madtide (first-party) | Remembers your cookie preferences so we don't ask again on every page. | 12 months | Strictly necessary |
| mt_theme | madtide (first-party) | Remembers dark or light theme choice. | 12 months | Functional |
| mt_vid | madtide (first-party) | First-party visitor identifier used by our own analytics to count unique visits. Set only after you accept analytics cookies. No cross-site tracking. | 13 months | Analytics |
| mt_ref | madtide (first-party) | Records the partner whose link brought you to the site so the correct enroller is attributed if you sign up. | 30 days | Attribution |
| mt_utm | madtide (first-party) | Captures UTM parameters from the URL that brought you to the site so we can measure campaign performance in aggregate. | 30 days | Marketing |
4. Region-aware defaults
If you visit from the EEA, UK, Switzerland, or Brazil, non-essential cookies are off by default and we set them only after you accept them in the banner. From other regions, the banner is a notice; where local law requires an opt-out (California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, Tennessee, Indiana, New Hampshire) you can turn off analytics and marketing cookies from the banner or your settings. We honour the Global Privacy Control browser signal automatically.
5. Your choices
- Change your preferences any time from the banner or the settings page.
- Block cookies in your browser (settings vary by browser). Blocking strictly-necessary cookies will prevent sign-in and other core features from working.
6. Do Not Track
There is no consistent industry standard for the older "Do Not Track" HTTP header, so we do not respond to it. We do respond automatically to the newer Global Privacy Control signal.
7. Changes
As we add or remove tools we will update the inventory above and the effective date. Material changes will be surfaced in the banner so you can re-consent.
8. More information
For everything else, see our Privacy Notice and the current list of sub-processors. Questions? privacy@madtide.com.