Cookie policy
There is no cookie banner, and here is why
This site sets three cookies, all of which are strictly necessary to do the thing you asked it to do: sign you in and keep your session secure. Under the Privacy and Electronic Communications Regulations, strictly necessary cookies do not require consent, so you are not asked for any.
There is no analytics, no advertising and nothing that tracks you across other websites. If that ever changes, a consent banner will appear and nothing will be set until you agree to it.
The cookies
| Name | What it does | How long |
|---|---|---|
mlv_session | Keeps you signed in to your account. It holds a random token, not your details, and the server can invalidate it at any time | 30 days, or until you sign out |
mlv_csrf | Stops another website submitting forms as you, by making your browser prove a request came from this page | 30 days |
mlv_admin | The licence admin sign-in. Only ever set for the site owner | 24 hours |
All three are restricted to this site, are sent only over HTTPS, and the two session cookies cannot be read by JavaScript.
Stripe, on the buy page only
The buy page loads Stripe's payment form, which is Stripe's own code in a frame. Stripe sets its own cookies there for fraud prevention, which is how it can tell a real buyer from a stolen card being tested. Those cookies are set only on /buy/, not anywhere else on this site, and are described in Stripe's cookie policy.
Stripe treats these as strictly necessary for payment security. If you block them, the payment form may refuse to work.
Local storage
Your account page briefly remembers an in-progress purchase in your browser's session storage, so reloading the page while a payment confirms does not lose it. It is cleared when you close the tab and is never sent anywhere.
Turning them off
You can block or delete cookies in your browser settings. Blocking these ones means you will not be able to sign in or buy anything, since they are what makes those work.