cookie policy

A cookie is a small piece of text a website asks your browser to keep and hand back on your next request. It is best thought of as a cloakroom ticket: without one, signing in would be impossible. The same mechanism can also be used to recognise you across unrelated websites for advertising — that second use is the one mittera does not make.

• mittera.session_token — your sign-in session. The only cookie that persists. It carries a session token, not your password. It is HTTP-only and marked Secure in production, and lasts 30 days on a sliding basis. Signing out clears it.
• Short-lived sign-in cookies — temporary cookies that exist only for the duration of a sign-in exchange, then cleared.

That is the complete list. Nothing on this site sets a cookie for measurement, advertising, personalisation or A/B testing, and no cookie is set at all until you sign in.

mittera does not load typefaces from Google Fonts or any other third-party CDN. The typefaces are self-hosted at build time and served from mittera.eu along with the rest of the page, so no request leaves your browser for a third party when you open a page.

Under the ePrivacy Directive, consent is required before storing information on your device — except where the storage is strictly necessary to provide a service you explicitly requested. A session cookie for a service you asked to sign in to is the textbook example of that exemption, so mittera does not show you a banner: there is nothing to consent to. If mittera ever introduces a cookie that is not strictly necessary, a genuine consent mechanism appears first.

No third party sets a cookie on mittera.eu and no third-party script runs on it. The third parties that do process data on mittera’s behalf — the delivery provider and the mail provider that sends your sign-in codes — sit on the server side and set nothing in your browser. All of them are listed at mittera.eu/subprocessors.

The simplest way is to sign out, which clears the session cookie immediately. Every major browser also lets you inspect and delete cookies for a single site under its privacy or security settings. Deleting the session cookie signs you out but does not delete your account or your data.

This page is updated whenever the cookies mittera sets change, with a new “last updated” date.

Questions about cookies: privacy@mittera.eu.