Alpha · policies
Cookie & Storage Policy
Updated 2026-11-05 · Pending final operator/legal review
Cookies and browser storage remember small amounts of information on your device. This includes localStorage and sessionStorage, not just cookies. The inventory below distinguishes MITK code behavior from external configuration still awaiting verification.
This baseline is not yet cleared for alpha invitation: external analytics/security configuration and remaining retention/legal details require verification.
Necessary sign-in storage
WordPress uses wordpress_logged_in_* and wordpress_* or wordpress_sec_* authentication cookies when you sign in. Without Remember me, the browser cookie is a session cookie and the default authorization lifetime is two days. Remember me defaults to fourteen days, with a twelve-hour cookie grace allowance. WordPress or security-plugin configuration can change those defaults. These support requested authentication and session security, not optional analytics. WordPress’s core login route may also set wordpress_test_cookie to check browser cookie support.
Requested Chat continuity
For signed-in Chat, sessionStorage keys beginning mitk-chat-session: hold the open view, selected conversation, scroll position and up to ten Message drafts. MITK restores recent state only within thirty minutes of the last update; this freshness limit is not a promise that the browser physically deletes storage after thirty minutes. It clears MITK Chat session data on observed sign-out/account loss or session change. Closing the tab normally clears sessionStorage. Drafts are not analytics; avoid using a shared device for private Messages.
Alpha notice preference
After you explicitly dismiss the alpha notice, localStorage key mitk:alpha_notice_v1 stores dismissed. It has no automatic expiry and may remain until you clear site data or the notice version changes. It only remembers that preference; it does not contain your Account identity or browsing history.
WordPress emoji support
WordPress may store wpEmojiSettingsSupports in sessionStorage after checking your browser’s emoji support. The installed code refreshes the result after approximately ten minutes; closing the tab normally clears session storage. Emoji fallback images/scripts may load from WordPress infrastructure at s.w.org. This is a browser capability preference, not MITK analytics.
External media and artwork
Spotify players require a separate media choice by default. Allow Spotify loads players on the current page. The optional, initially unchecked Remember my choice control saves only this Spotify-player choice in localStorage (mitk:spotify-player-choice:v1) for up to 90 days. With a valid saved allowance, Artist and Playlist players load automatically on later visits. Spotify then receives the player request and can use its own storage according to its policies. A site-policy exemption requires explicit operator configuration; it is not inferred from Analytics consent or a Listening connection. Spotify artwork at i.scdn.co can load before a player is opened. YouTube and SoundCloud links are external navigation links in the inspected MITK templates, not automatically loaded players.
Analytics and security services
The operator reports that Analytics is enabled through Google Site Kit. Its actual Google Analytics tag/storage and consent configuration, and Loginizer/hosting storage, are still unverified. They are not covered by an invented generic cookie list. No generic Accept All banner has been added without a verified active tracking integration. Required security storage must not be disabled to avoid consent; optional measurement needs a verified, appropriately blocked integration before alpha invitation.
Changing choices
Use Spotify privacy beneath an Artist or Playlist player to disable Spotify players and remove the saved media choice. This removes current MITK player frames but does not erase storage already set by Spotify. You can also sign out, disconnect optional providers, avoid loading external players, and clear cookies/site data using your browser. Clearing necessary sign-in data signs you out; clearing Chat session storage can remove drafts. Dismissal preferences can be reset by clearing site data. Where optional analytics consent is implemented, a reachable Cookie settings control must allow you to revisit it. That analytics integration remains a launch blocker in this baseline.
Contact the operator: info@mitkcollective.com