Cookie Policy

madcoolhifi.com uses cookies sparingly. This page lists what we set, why, and how you control them.

Strictly necessary

mch_session — HttpOnly, SameSite=Lax, secure. Holds your signed session JWT. Required for login and member access. Seven-day lifetime.

sb-* — set by Supabase on auth.madcoolhifi.com when you sign in with a magic link. Keeps you signed in there so the auth bridge can hand madcoolhifi.com your session.

mch_cradle, mch_fn_capture — HttpOnly access cookies set only when you unlock the password-gated design preview (30 days) or open a staff capture link (180 days). Most visitors never receive them.

Cloudflare Turnstile — the audit, Snapshot and Signal Path forms load a Cloudflare bot check that reads device and browser signals to tell people from bots. It runs without consent because it protects the forms from abuse. See Cloudflare's Turnstile privacy addendum.

Analytics (opt-in)

_ga, _ga_6G52WNDV4X — Google Analytics 4, set only after you accept analytics in the consent banner. They tell Google Analytics a returning browser from a new one. Google's default lifetime for them is two years. Until you accept, Google Analytics still loads in Consent Mode with analytics storage denied: it sets no cookies and sends Google only cookieless pings. Its advertising storage stays denied either way. See how Google uses this data.

PostHog — product analytics, loaded only after you accept analytics. It sets no cookies: its visitor id lives in memory for the current page, and it keeps one opt-in flag in your browser's local storage. If you don't accept, PostHog never loads.

Preferences

mch_consent — remembers your consent banner choices. 12-month lifetime.

Chat widget (LeadConnector)

The chat bubble on most pages is a LeadConnector (HighLevel) widget and the site's only way to sign up for text messages from us. It loads on every page where it appears, whether or not you accept optional cookies, and it may store its own identifiers in cookies or local storage on your device. We do not control what it stores. What happens to what you submit through it is covered in the SMS section of our privacy policy.

What we don't use

No third-party advertising cookies. No cross-site tracking. No session-replay. No fingerprinting for tracking; Turnstile reads browser signals only to run its bot check.

Managing cookies

The consent banner appears on your first visit. To change your choices later, delete the mch_consent cookie for madcoolhifi.com in your browser and reload: the banner comes back. Your browser also lets you block or delete cookies site-by-site — doing so for madcoolhifi.com will sign you out but won't otherwise break the site.