Legal

Cookie Policy

Last updated: [DRAFT — not yet in effect]

This Cookie Policy explains how MMX LLC, a New York limited liability company ("we," "us," or "our") uses cookies and similar tracking technologies on the Suppo.se website and service (the "Service"). This policy supplements our Privacy Policy.

1. What Are Cookies?

Cookies are small text files that a website places on your device when you visit. They allow the site to remember your actions and preferences (such as being logged in) over time, so you do not have to re-enter them each visit.

2. What Cookies We Use

Strictly necessary cookies only. The Service currently sets only the cookies required for authentication and session management. We do not set advertising cookies, tracking cookies, or analytics cookies.

These cookies are set by Auth.js (our authentication library) and by Amazon Cognito (our identity provider). They are first-party cookies served from suppo.se and its auth subdomain.

Cookie name	Purpose	Duration
`authjs.session-token`	Maintains your signed-in session after login	Session / 30 days
`authjs.csrf-token`	Prevents cross-site request forgery on auth endpoints	Session
`authjs.callback-url`	Remembers where to redirect you after sign-in	Session
`authjs.pkce.code_verifier`	OAuth PKCE flow security token (set transiently during OAuth sign-in)	Minutes (OAuth flow only)

These cookies fall under the "strictly necessary" exemption of the EU ePrivacy Directive because they are essential for the operation of the Service you explicitly requested. They do not require a consent banner under EU or UK law.

3. Third-Party Cookies

We do not embed third-party widgets (advertising networks, social media buttons, or tracking pixels) on the Service that would set third-party cookies on your device.

During OAuth sign-in flows, you will be redirected to Google, Facebook, or Microsoft. Those providers may set their own cookies under their own policies during the authentication process. We do not control those cookies.

4. Analytics

We do not currently use any analytics service that sets persistent cookies or tracking pixels. If we add analytics in the future, we will update this policy and, where required by law, obtain your consent before setting analytics cookies.

5. Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to:

View cookies that have been set
Block cookies from specific sites
Delete all or specific cookies

Note that blocking or deleting the authentication cookies listed above will sign you out of the Service, as they are required for login to function.

For browser-specific instructions, visit your browser's help pages (e.g., Chrome, Firefox, Safari, Edge).

6. Changes to This Policy

We may update this policy if we add new cookies or change our cookie practices. Material changes will be communicated by updating the "Last updated" date at the top of this page.

7. Contact

For questions about this Cookie Policy, contact us at privacy@suppo.se.

MMX LLC · 4704 E Bluff Dr · Penn Yan, NY 14527