Cookie Policy

Last updated: July 6, 2026

This page lists every cookie and similar technology The Blind Machine sets in your browser, and what each one does. It is short because the list is short.

Essential cookies

One cookie, set when you sign in:

• Session cookie (session_id) — keeps you signed in. Signed, HTTP-only, and marked secure in production. It stays until you sign out or delete it in your browser.

Signed-out visitors browsing public pages get no session state they need to worry about; verifying a Computation Certificate works with no cookies at all.

Attribution cookies

If you arrive through a link tagged with campaign parameters (for example utm_source), we set two signed, first-party cookies so we know which channel brought you here:

• mm_first_touch — the first channel that referred you. Written once, kept up to 1 year.
• mm_last_touch — the most recent channel. Kept up to 30 days, refreshed on new tagged visits.

They hold a channel label (such as a source and campaign name), not an advertising identifier, and are never shared with ad networks. If you sign up, the labels are copied to your account so we know which channels work. Untagged visits set neither cookie.

Local storage

• theme — your dark/light preference, kept in your browser's localStorage. It never leaves your browser.

Analytics without cookies

Our page-view analytics are first-party and cookieless: no analytics cookie, no third-party pixel, no fingerprinting. IP addresses are masked before storage and we do no geolocation. Details are in the Privacy Policy.

What we do not set

No advertising cookies. No third-party analytics or session-recording cookies. No cross-site trackers. If that changes, this page changes first.

Managing cookies

You can block or delete cookies in your browser settings. Blocking the session cookie means you cannot stay signed in; everything public still works.

Questions: support@blindmachine.org.