// cookie notice
Last updated: April 1, 2026
Placeholder document. Final terms will be drafted with counsel before public launch. The cookie names and retention periods below describe our intended setup, subject to final technical review.
// 01 · what cookies are
Cookies are small text files stored on your device by your web browser when you visit a website. They let the site recognise your device on a subsequent visit and are widely used to make websites work, remember preferences, and gather analytics.
This notice also covers comparable technologies that perform similar functions, including local storage, session storage, pixel tags, web beacons, and software development kits. Where this notice refers to “cookies” it should be understood to include those technologies.
This Cookie Notice applies to the marketing site at magistry.io. The Magistry application at https://app.magistry.io sets only the strictly necessary cookies needed to keep you signed in and to protect against cross-site request forgery. We do not run advertising trackers inside the authenticated product.
// 02 · what we use cookies for
We use cookies to operate the Service, to keep you signed in, to remember preferences you have set, to understand in aggregate how visitors use the marketing site so we can improve it, and to measure the effectiveness of any advertising or referral campaign we run.
Where required by law, non-essential cookies are set only after you grant consent via the cookie banner that appears on your first visit. You can change or withdraw consent at any time by reopening the cookie preferences from the link in the footer.
We do not use cookies to build cross-site advertising profiles of you, we do not sell information collected through cookies to third parties, and we do not deploy fingerprinting techniques designed to identify visitors who have disabled cookies.
// 03 · categories
// 3 examples
Required to operate the Service. Without these the site does not work as intended. Set without consent under the ePrivacy Directive exemption.
| Cookie | Purpose | Retention |
|---|---|---|
| mag_session | Maintains your authenticated session across page loads. | Session (cleared on browser close) |
| mag_csrf | Cross-site request forgery protection on form posts. | Session |
| mag_consent | Records your cookie-banner choices so we do not re-ask. | 12 months |
// 3 examples
Remember preferences you have set, such as language, dark/light theme, or which workspace you last visited. Disabling these means we cannot remember your settings.
| Cookie | Purpose | Retention |
|---|---|---|
| mag_theme | Stores your light/dark/system theme preference. | 12 months |
| mag_workspace | Last-active workspace id for sign-in routing. | 30 days |
| mag_locale | Preferred display language for the dashboard. | 12 months |
// 3 examples
Help us understand how visitors use the marketing site so we can improve it. Set only after you grant consent in the cookie banner. We use a privacy-respecting provider and do not run cross-site advertising trackers.
| Cookie | Purpose | Retention |
|---|---|---|
| _pa_* | Plausible-style aggregate analytics — page views and referrers, no personal profile. | Up to 14 months |
| _ga_* | Google Analytics 4 measurement identifiers, where enabled. | Up to 14 months |
| mag_attrib | First-touch marketing attribution for sign-up funnel reporting. | 90 days |
// 3 examples
Used to measure the effectiveness of campaigns we run on third-party platforms. Set only after you grant consent. Disabled by default in jurisdictions that require opt-in consent.
| Cookie | Purpose | Retention |
|---|---|---|
| mag_ref | Referral parameter passed from outbound links in our newsletter. | 30 days |
| lin_ads_* | LinkedIn ad-measurement insight tag, where enabled. | Up to 6 months |
| g_ads_* | Google Ads conversion pixel for sign-up attribution. | Up to 90 days |
// 04 · managing your preferences
You can change your cookie preferences at any time by reopening the cookie banner from the “Cookie preferences” link in the site footer. Your choices are stored in the mag_consent cookie and respected on subsequent visits.
Most browsers also let you control cookies directly through browser settings. You can usually find these controls under the “Privacy,” “Tracking,” or “Cookies” menu in your browser settings. Blocking strictly necessary cookies through your browser may prevent parts of the Service from working as expected, including authentication.
For mobile devices you can also control advertising identifiers through the operating-system privacy settings on iOS and Android, and you can reset or limit the identifier used for ad measurement.
// 05 · do not track
Some browsers send a “Do Not Track” (DNT) signal to indicate that the visitor does not want to be tracked across websites. There is no industry-standard response to the DNT signal at the time of writing. We treat a DNT signal as the equivalent of declining non-essential analytics and marketing cookies for the duration of your visit.
We also honour the W3C Global Privacy Control (GPC) signal where it is detected and treat it as an opt-out from any data sharing covered by US state privacy laws that recognise the signal.
// 06 · third-party cookies
A small number of third-party providers may set cookies on the marketing site to deliver embedded functionality. Subject to your consent where required, these may include:
Third-party providers control the cookies they set and process. We recommend reviewing the privacy and cookie notices of each provider for full details of their practices.
// 07 · changes
We may update this Cookie Notice from time to time to reflect changes in our practices, the technologies we use, or applicable law. When we make material changes, we will update the “Last updated” date at the top of this notice and, where the change is significant, re-prompt the cookie banner to give you the opportunity to review your preferences again.
// 08 · contact
For questions about cookies or this notice, write to privacy@magistry.io. For broader privacy enquiries, see our Privacy Notice.