Cookie Policy · maffen

This page lists every cookie Maffen sets, what it does, how long it lasts, and whether it’s strictly necessary or requires your consent. We don’t use third‑party advertising or analytics trackers, and we don’t load a third‑party cookie banner.

Cookie	Purpose	Lifetime	Category
`maffen_session`	Keeps you signed in after you verify your phone.	Rolling 30 days of inactivity, or until you sign out	Strictly necessary
`_csrf`	Anti‑forgery token that protects forms you submit while signed in.	Session	Strictly necessary
`maffen_onb`	Holds your in‑progress sign‑up (name + the number a code was sent to) before your account exists.	30 minutes	Strictly necessary
`maffen_ref`	Remembers a referral code you clicked so the referral is credited at sign‑up.	30 minutes	Strictly necessary
`maffen_consent`	Remembers your cookie choice so we don’t ask again.	6 months	Strictly necessary
`maffen_attr`	Marketing attribution — which campaign/link brought you here (UTM tags, ad click IDs, referrer). Set only if you choose “Accept all”.	30 days	Marketing (consent‑gated)

Your choice

Strictly‑necessary cookies are required to run the service and aren’t optional. The single marketing cookie (maffen_attr) is set only if you select “Accept all” in the banner; choosing “Essential only” means it is never written. You can change your mind any time by clearing the maffen_consent cookie in your browser, which makes the banner appear again. All Maffen cookies are first‑party, HttpOnly and signed, and are sent only over HTTPS in production.

See our Privacy Policy for how the data behind these cookies is handled.