Cookie policy
Last updated: 21 May 2026
This document is a good-faith starter draft describing the cookies and similar technologies Million Memories uses. It is not legal advice. Please have a qualified lawyer review it before relying on it in production.
What this policy covers
This policy covers cookies and similar local-storage technologies used by Million Memories. It complements our Privacy policy, which explains how we handle personal data more broadly.
What cookies are
Cookies are small text files placed on your device by websites you visit. They're used to remember things between page loads — for example, that you're signed in. localStorage is a related technology that stores small amounts of data in your browser; we use it too, and it's included in this policy.
What we use, and why
Million Memories does not use advertising, analytics, or tracking cookies. We use only the minimum needed to run the service.
Strictly necessary
- Session cookie (set by our auth system) — keeps you signed in. Removed when you sign out or after a few weeks of inactivity. Without it the service cannot remember who you are.
- CSRF token cookie — prevents cross-site request forgery on auth and account actions. Cleared on sign-out.
Functional (localStorage)
- echo_hearts — remembers which pixels you've hearted on this browser so the heart icon shows the correct state when you revisit a memory pixel.
- NEXT_LOCALE — remembers your preferred language so we don't prompt you again.
Third-party
- Stripe sets its own cookies while you're on the checkout page to detect fraud and complete payments. These cookies are governed by Stripe's own privacy policy at stripe.com.
What we don't use
- No advertising cookies.
- No third-party analytics (Google Analytics, etc.).
- No social-media tracking pixels.
- No cross-site fingerprinting.
Controlling cookies
Most browsers let you block or delete cookies from their settings. Some specifics:
- Blocking the strictly-necessary session cookie will sign you out and prevent you from signing back in.
- Clearing localStorage will reset your hearted-pixel list and forget your language preference — no other consequence.
- You can manage Stripe's cookies via your browser's normal cookie controls; Stripe respects those settings.
Changes to this policy
If we add, remove, or change any cookie, we'll update this page and bump the "last updated" date above.
Contact
Questions about cookies or your privacy on Million Memories? Email privacy@millionmemories.org.