MerdialMerdialerdial

Cookie Policy

Three keys, no trackers, no banner. · Last updated 6 September 2026

This page lists every piece of data Merdial stores in your browser, what it is for, and how long it lasts. It is short — Merdial runs no advertising, no third-party analytics and no session-replay tooling, so there is very little to list.

No tracking, and therefore no banner

We do not set advertising or cross-site tracking cookies, do not embed third-party marketing pixels, and do not sell or share browsing data. There is no consent banner because everything below is strictly necessary to make the product work or to remember a preference you set yourself.

1. What is stored

KeyTypePurposeLifetime
sb-…-auth-tokenLocal storage — strictly necessaryYour signed-in session. Set by our authentication provider. Without it you would be signed out on every page load.Until you sign out, or the session expires
meridial-themeLocal storage — preferenceWhether you chose light or dark. Absent until you make an explicit choice — before that the site follows your operating system.Until cleared
prospex-login-guardLocal storage — securityCounts failed sign-in attempts on this device so the login form can rate-limit brute-force attempts.Short-lived; resets on a successful sign-in
Interface preferencesLocal storage — preferenceSmall pieces of interface state so the app opens where you left it: selected department and campaign, panel and feed toggles, dismissed hints.Until cleared

All of these are local storage, not cookies: they stay on your device and are never transmitted automatically with a request the way a cookie is. The authentication token is sent only when the application deliberately calls our API.

2. Third parties

  • Checkout. Our merchant of record, Polar, sets its own cookies during a purchase in order to process the payment and prevent fraud. Those are governed by Polar’s own policy and appear only on the checkout flow.
  • Fonts. The public pages load a webfont from Google Fonts. Google receives the request and the requesting IP address as part of serving the file. No cookie is set by it.
  • Nothing else. No Google Analytics, no advertising tags, no social pixels, no heatmap or session-replay tool.

3. Your control

You can clear site data at any time in your browser’s settings. Clearing it signs you out and resets your theme choice back to following the operating system; nothing else is lost, because none of it holds anything but preferences.

Blocking storage entirely

If your browser blocks local storage for our site, the product will not be able to keep you signed in. That is a functional limit rather than a policy choice — the session has to live somewhere.

4. Changes

If we ever add analytics or any storage that is not strictly necessary, we will update this page and ask for consent before setting it. This policy is current as of 6 September 2026. Questions: team@merdial.com.