Cookie Policy
Last updated: draft, not reviewed by a lawyer — to be validated before public sign-ups open.
What we use
Two cookies, strictly necessary for the site to work, both set by M8 itself — never by a third party:
| Cookie | Role | Duration |
|---|---|---|
| gs_session | Keeps you logged in between visits. | 30-day rolling window |
| csrftoken | Protects against cross-site request forgery. | 1 year |
What we don't use
- No advertising or targeting cookies.
- No third-party audience analytics tool.
- No local browser storage (localStorage) for tracking.
Why there's no consent banner
The two cookies above are strictly necessary for the service to work (staying logged in, securing forms) — without them, the site can't function. This type of cookie doesn't require prior consent; there's nothing else to accept or decline.