Cookies

The short version

Every cookie here is needed for the site to work. There are no analytics, advertising or social-media cookies, and no scripts from other companies. That’s why we don’t ask you to accept cookies — there’s nothing optional to accept.

Cookies

authjs.session-token

Keeps you signed in. Lasts 90 days after you last use the site.

mantle.pending

Ties a sign-in link to the browser that asked for it, so nobody else can use it. Lasts 10 minutes.

mantle.device

Recognises a browser you've told us to trust, so signing in there is quicker. Lasts a year.

signin-next

Remembers where you were going while you sign in. Lasts 10 minutes.

mantle-draft

Lets a card you started without signing in find its way back to you. Lasts a year.

mantle.seen

Remembers cards opened in this browser, so they can be kept on a mantle if you make an account. Lasts a year.

On the secure site the sign-in cookie’s name starts with __Secure-. All of them are sent only to The Mantle, and none can be read by scripts on the page.

Stored in your browser

A few small notes are kept in your browser itself and never sent to us:

mantle:opened:…

Whether a card's envelope has already been opened here, so it isn't shown twice.

mantle.send.copied.…

Which card links you've already copied while sending.

mantle-anon-notice-seen

That you've seen the note about working without signing in.

Clearing them

You can clear them in your browser’s settings at any time. You’ll be signed out, and a card you started without signing in will no longer be reachable from that browser.