1. Your controls
On your first visit, Muricads offers `Accept analytics`, `Reject analytics` and granular preferences with equal access to the service. Use the `Privacy choices` button in the footer at any time to change your decision. Withdrawing analytics consent stops future analytics collection.
2. Essential storage
| Name/provider | Purpose | Typical lifetime |
|---|---|---|
muricads_edit_session | Securely associates this browser with listings it can edit. HttpOnly. | 30 days |
muricads_consent_v1 | Stores essential-only or analytics consent. | 180 days |
muricads_admin_v1 | Signed HttpOnly operations session, created only after an authorised administrator signs in. | 8 hours |
muricads_watchlist_fragment_v1 | Temporarily preserves a watchlist email credential in tab-scoped session storage while it is removed from the address bar before analytics start. | Cleared when the page reads it; invalid after 10 minutes |
| Stripe Checkout | Fraud prevention, Checkout continuity and payment processing after you choose to pay. | According to Stripe |
| Cloudflare Turnstile | Security verification for claim and recovery actions. | Short-lived security data |
Blocking essential storage may prevent claiming, Checkout, recovery or editing from working. Watchlist preferences do not add a cookie: the one-time or management credential is carried in the email link fragment, removed from the address bar before analytics start and retained only for the active page interaction.
3. Optional analytics
| Provider | Purpose | Activation |
|---|---|---|
| Cloudflare Web Analytics | Aggregate visits, referrers, country, device and performance. | Only after analytics consent |
| PostHog | Allowlisted product events, page navigation, performance, exceptions and masked session replay. Generic click, form and input autocapture is disabled. | Only after analytics consent |
muricads_checkout_surface_v1 | Muricads session storage containing only the aggregate map/leaderboard/notification entry category across Stripe Checkout; no territory, order or user identifier. | Only after analytics consent; removed on the Checkout return |
Inputs are masked and elements carrying claim codes are excluded from capture. Product-event properties are limited to aggregate categories; state codes, product details, URLs, emails, order IDs, claim codes, CAPTCHA tokens, payment credentials and other secrets are not accepted by the event boundary.
4. Browser settings and contact
You can also delete or block browser storage using browser controls. For questions, contact info@muricads.com. See the Privacy Policy for legal bases, recipients, transfers, retention and your rights.