Cookie Policy

Overview

This page lists every cookie, browser-storage key, and third-party software development kit (SDK) that the Mecha Site platform reads or writes in your browser. We classify each one into four categories — Essential, Functional, Statistical, and Marketing — so you can decide what to allow.

The category controls in the preferences modal apply your decision immediately and synchronise across every open tab. We honour the strictest applicable regime for your location: UK visitors are governed by the Privacy and Electronic Communications Regulations (PECR) as amended by the UK Data (Use and Access) Act 2025; EEA visitors are governed by the ePrivacy Directive and EU GDPR.

Your rights

• Withdraw consent for any non-essential category at any time using the button above — withdrawal takes effect on the next interaction.
• Request a copy of every consent decision recorded against your account or browser session via privacy@mechasite.com (right of access, UK GDPR Art. 15).
• Lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk — or, in EEA member states, with your national supervisory authority.

Essential(4 items)

Strictly necessary for the platform to operate. These cookies cannot be switched off — without them you cannot sign in, your preferences cannot be saved, and the service will not function.

Lawful basis: necessary for the performance of the contract (UK GDPR Art. 6(1)(b)) and PECR Reg. 6(4)(a) "strictly necessary" exemption.

• __ms_accessCookie

  Short-lived sign-in token. Required to keep you signed in.

  Provider:

  MechaSite

  Duration:

  15 minutes

• __ms_refreshCookie

  Sign-in session token. Required to keep you signed in across visits.

  Provider:

  MechaSite

  Duration:

  7 days (30 days with "remember me")

• __ms_consentCookie

  Records your cookie preferences. Required so we can honour your choices on future visits.

  Provider:

  MechaSite

  Duration:

  12 months

• __ms_sidCookie

  Anonymous session identifier used to keep your cookie preferences consistent if you later create an account.

  Provider:

  MechaSite

  Duration:

  30 days

Functional(3 items)

Remember preferences and admin workflow state so the platform behaves the way you set it. None of these track you across other websites or build a profile of you.

Lawful basis: necessary for the service you have actively requested. In the UK, the Data (Use and Access) Act 2025 exempts appearance and workflow-state storage from prior consent — you may opt out at any time below.

• mecha-themeLocal storageDUAA exempt · opt-out only

  Remembers your preferred colour theme (light / dark / system).

  Provider:

  MechaSite

  Duration:

  Until cleared by user

• mechasite-get-startedLocal storageDUAA exempt · opt-out only

  Remembers your progress through a multi-step form so partial answers survive page reloads.

  Provider:

  MechaSite

  Duration:

  Until form completion or user clears

• launch-banner-${siteId}Local storageDUAA exempt · opt-out only

  Remembers that you have dismissed an in-product banner so it does not reappear.

  Provider:

  MechaSite

  Duration:

  Until cleared by user

Statistical(2 items)

Aggregate analytics and error monitoring that help us identify issues and improve the product. We do not sell this data and do not use it for advertising.

Lawful basis: legitimate interest (UK GDPR Art. 6(1)(f)) for aggregate statistics under DUAA. EEA visitors must opt in (ePrivacy Directive Art. 5(3)).

• Sentry.initThird-party SDK

  Error tracking and performance monitoring. Helps us identify and fix technical issues quickly.

  Provider:

  Sentry (Functional Software Inc.)

  Duration:

  Session + 90 days server-side retention

  Sub-processor:

  Sentry (Functional Software, Inc.)

• Statsig.initialize (public)Third-party SDK

  Feature flags and aggregate analytics on public pages. Uses an anonymous browser identifier only — does not track individuals.

  Provider:

  Statsig Inc.

  Duration:

  Session

  Sub-processor:

  Statsig, Inc.

Marketing(2 items)

User-identifiable tracking — session replay recordings and personalised feature experiments. Always opt-in: nothing in this category runs unless you explicitly allow it.

Lawful basis: consent (UK GDPR Art. 6(1)(a) + PECR Reg. 6). Required under all regimes — never DUAA-exempt.

• Sentry.addIntegration(Replay)Third-party SDK

  Session replay captures a privacy-masked recording of your session to help diagnose complex UI bugs. All text is masked and media blocked by default.

  Provider:

  Sentry (Functional Software Inc.)

  Duration:

  Session + 30 days server-side retention

  Sub-processor:

  Sentry (Functional Software, Inc.)

• Statsig.initialize (authenticated)Third-party SDK

  Personalised feature flags and experiments for authenticated users. Uses your profile identifier to target feature rollouts by cohort.

  Provider:

  Statsig Inc.

  Duration:

  Session

  Sub-processor:

  Statsig, Inc.

Changes to this policy

When we add a new cookie, change a purpose, or onboard a new sub-processor, this page is regenerated automatically from the platform’s canonical cookie inventory. Material changes trigger a re-acceptance prompt the next time you visit, and we record the policy revision against your consent decision so we can demonstrate exactly what you agreed to and when.

Contact

Questions about a specific cookie or your consent record? Email privacy@mechasite.com.