Skip to main content

Cookies

What Multi 2 Diamonds stores on your device. Last updated 2026-08-17.

This is a courtesy translation. The binding version of this document is the Polish one, which is written against Polish law rather than translated into it. W razie rozbieżności wiąże wersja polska — where the two differ, the Polish version prevails.

Short version: two cookies — one keeps you signed in, the other remembers which language you are reading. We do not track you, we do not advertise, and nothing here is shared with anyone for those purposes. That is why we do not ask you to accept cookies: art. 361 ust. 1 of the Polish Act of 12 July 2024, the Prawo komunikacji elektronicznej, requires consent only for storing information on, or reading it from, your device where that is not necessary to deliver the service you asked for. We have nothing of that kind.

This page is also the information required by art. 6 pkt 2 of the Act on the supply of services by electronic means — on the function and purpose of data that is not part of the service and that we put into your system.

What we store

  • __Host-session — your sign-in session. Set when you sign in, cleared when you sign out, and otherwise expires after 30 days. It holds a signed token identifying your session, and nothing else. It is marked HttpOnly so no script can read it, Secure so it only travels over HTTPS, and SameSite=Lax so other sites cannot use it. Without it there is no way to stay signed in, so it is necessary to deliver the service.
  • m2d_locale — the language you are reading. Holds pl or en and nothing else. It is what makes a link that carries no language — one from an email, or the page a form sends you to — come back in the language you were already reading instead of guessing from your browser. It expires after a year, is marked HttpOnly and SameSite=Lax, and identifies nobody: a language preference is the standard example of storage exempt from the consent requirement.
  • A local preference for collapsed folders. When you collapse a folder in your collections, that is remembered in your browser's local storage so it is still collapsed next time. It never leaves your device and it identifies nothing.

What we deliberately do not use

  • No analytics. No Google Analytics, no page-view tracker, no heatmaps.
  • No advertising or social pixels.
  • No third-party fonts at run time. The typefaces are downloaded once when the site is built and served from our own domain, so your browser never contacts a font provider and your IP address is never disclosed to one.
  • Bot protection without cookies. The registration and password-reset forms use Cloudflare Turnstile, which checks the browser without setting a cookie in the configuration we use. It does see your IP address — that is covered in the privacy policy.

Getting rid of them

Signing out clears the session cookie. You can also clear cookies and site data for this site in your browser's settings at any time — the only effect is that you will be signed out and your collapsed folders will reopen. Blocking the session cookie entirely means you cannot sign in.

If this changes

If we ever add something that stores or reads data on your device for a purpose beyond running the service, we will ask for your consent first and update this page. Questions: support@multi2diamonds.com.