Legal

Cookie Policy

Three items of storage, no trackers, and toggles that genuinely control something. This page lists every one of them by name.

Last updated 2026-08-04

Before you publish this. This document describes how the software actually behaves, which makes it an accurate starting point — but it is not legal advice. Have a qualified adviser review it, and replace every [BRACKETED] placeholder with your real company details before going live.

01The short version

This site sets three items of browser storage in total. One keeps operators signed in, one remembers the choice you make about the other two, and one remembers whether you prefer the light or dark theme.

There are no advertising cookies, no social media pixels, no session recording, and no cross-site tracking of any kind. We are not claiming that as a virtue — it is simply what the site does.

Your current choice

You have not made a choice yet, so everything except strictly necessary storage is switched off.

02Exactly what gets stored

Name	Type	Purpose	Expires
`mf_session`	Cookie (HttpOnly, SameSite=Lax)	Keeps a staff operator signed in to the console. Only ever set after a successful login — it is never set for ordinary visitors.	12 hours
`mf-consent`	Local storage	Records the choice you make on the cookie banner. Without it we would have to ask you on every page.	Until you clear it
`mf-theme`	Local storage	Remembers light or dark theme. Only written if you allow the Preferences category, and deleted immediately if you withdraw it.	Until you clear it

03The categories, and what declining actually does

A consent banner is worthless if the toggles do not control anything. Here is precisely what each one changes.

Category	Effect of declining
Strictly necessary	Cannot be declined. Covers the login session and the record of this very choice. Neither is used to track you.
Preferences	The theme toggle keeps working for the current visit, but the setting is not written to storage and any previously stored value is deleted straight away. Your next visit follows your operating system’s light or dark setting.
Analytics	Nothing changes today, because no analytics tool is installed. The category exists so the control is already in place if we ever add one — at which point it would only load after you allow it.

04Third-party requests

The route map on tracking pages loads its tiles from OpenFreeMap. Requesting a map tile necessarily discloses your IP address and the area you are looking at to that provider, exactly as it would with any mapping service.

OpenFreeMap sets no cookies and requires no account or API key, which is a large part of why we chose it. Map tiles only load on pages that show a map — the marketing pages make no third-party requests at all.

05Managing cookies yourself

You can change your mind at any time using the button in the first section above, or the “Cookie preferences” link in the footer of every page.

Your browser also gives you full control — every major browser lets you block or delete cookies and site storage per site. Blocking the strictly necessary items will sign operators out of the console but will not otherwise break the public site.

More detail on the underlying data is in our Privacy Policy.