Legal

Cookie policy

What we store on your device, and why. Short, because we store very little.

Last updated August 5, 2026

Draft — pending legal review

This document follows the structure and disclosure standard expected of a firm of this kind, but it has not been reviewed by counsel and it is not legal advice.

01

The short version

This website sets no advertising cookies and no analytics cookies. There is no tag manager, no advertising pixel, and no third-party tracking script on these pages.

The only cookies involved are the strictly necessary ones that keep you signed in to the client portal, and they are set only if you sign in.

That is also why you have not been shown a consent banner: strictly necessary cookies do not require consent, and we do not set anything that does.

02

What cookies are

A cookie is a small text file a site asks your browser to store, then reads back on later requests. Related technologies — local storage and session storage — do a similar job. Where this policy says “cookies” it means all of them.

03

What we set

Strictly necessary — client portal only

  • sb-…-auth-token — keeps you signed in to the client portal between requests. Set by our authentication provider. It is cleared when you sign out.
  • theme — remembers whether you chose the light or dark interface, so it does not flash the wrong one on load. Stored in local storage, never sent to us.

These cannot be switched off without breaking sign-in. If you never sign in, they are never set.

What we do not set

  • Advertising or retargeting cookies.
  • Analytics or session-recording cookies.
  • Social media tracking pixels.
  • Cross-site identifiers of any kind.
04

Our emails

Outbound email we send on our own behalf or for a client contains no tracking pixels and no open-tracking beacons. We measure replies, not opens. Links are plain, not wrapped in a redirect that records the click.

05

If this changes

If we introduce analytics, advertising, or any non-essential cookie, we will update this page and put a consent mechanism in place before the cookie is set — not after. Consent will be opt-in, refusing will be as easy as accepting, and nothing non-essential will run until you choose.

Until then, this page describes the whole of it, and the date at the top tells you when it was last true.

06

Controlling cookies yourself

Every major browser lets you see stored cookies, delete them, and block them by site. Look under Settings, then Privacy. Note that blocking cookies on this domain will prevent the client portal from keeping you signed in.

You can also send a Global Privacy Control signal. We honor it where it applies, though as we neither sell nor share personal information the practical effect is nil.

07

More information

How we handle personal information generally is set out in our privacy policy. Questions about this page: privacy@mogul.com.