01What cookies are
A cookie is a small piece of data a website asks your browser to store and send back on later requests. Similar technologies include local storage and session storage. This policy covers all of them and explains how MUSWA uses them on muswa.com.
Cookies set by the site you are visiting are first-party. Cookies set by another domain, such as an embedded widget, are third-party.
02Cookies we use
| Name | Provider | Purpose | Lifetime | Attributes |
|---|---|---|---|---|
Name__Host-mw_sess | ProviderFirst party | PurposeKeeps you signed in and ties requests to your session | Lifetime30 days | AttributesHttpOnlySecureSameSite=LaxPath=/ |
| NameCaptcha challenge cookie | ProviderThird party (captcha provider, on its own domain) | PurposeProves a human solved the bot-protection challenge on sign-in, sign-up and account changes | LifetimeSession to 30 minutes | AttributesSecureSet only during a challenge |
The session cookie contains a random token. We store only a hash of it on our servers, so a database leak would not expose usable sessions. The __Host- prefix forces the browser to accept it only over HTTPS, only from our exact host, and never from a subdomain.
The captcha cookie is created by our bot-protection provider on its own domain while the challenge widget runs. It is not readable by us and is used only to complete the challenge.
03What we don't use
- No analytics or audience-measurement cookies.
- No advertising, retargeting or affiliate cookies.
- No social media pixels or "like" buttons that track you.
- No browser fingerprinting for tracking purposes.
Public marketing pages set no cookies at all until you sign in or open a page that shows a captcha.
04Local storage
The dashboard may keep small preferences in your browser's local storage, for example whether sound effects are muted or which billing period you last selected. This data never leaves your device, is not used to identify you, and you can clear it with your browser at any time.
05Why there is no banner
Under Article 5(3) of the ePrivacy Directive and the UK PECR, cookies that are strictly necessary to provide a service you explicitly requested are exempt from consent. Signing in and protecting the sign-in form from bots fall into that category.
If we ever add a cookie that is not strictly necessary, we will ask for your consent first and update this page before it goes live.
06How to control cookies
Every modern browser lets you view, block and delete cookies in its privacy settings. You can also sign out, which deletes the session on our side and clears the cookie. You can revoke every other session from the dashboard settings.
If you block cookies for muswa.com, public pages keep working, but you will not be able to sign in or use the dashboard.
07Changes and contact
We update this policy when our use of cookies changes; the date at the top shows the current version. Questions about cookies or privacy: [email protected]. For the wider picture of how we handle data, read our privacy policy.