Policy version 2026-10-31. This page lists every cookie the product can set, what each one does, and how to change your answer.
Nothing optional runs until you choose. You can change your answer at any time — the setting applies immediately and is remembered for 180 days.
Sign-in, security, and your own preferences. These cannot be switched off — the product does not work without them.
Aggregate usage numbers that tell us which features are used and which pages fail. Google Analytics is only loaded after you allow this; until then it is not requested at all.
Advertising measurement, plus third-party embeds such as YouTube videos. Before you allow this, embeds are replaced by a placeholder that does not contact the provider.
| Cookie | Category | Purpose | Lasts |
|---|---|---|---|
| __Secure-next-auth.session-token | Strictly necessary | Keeps you signed in. Encrypted and signed; the API reads it on every request. | Until sign-out, or 30 days |
| next-auth.csrf-token | Strictly necessary | Stops another site from submitting your session to us (cross-site request forgery). | Session |
| next-auth.callback-url | Strictly necessary | Remembers where to send you after sign-in. | Session |
| next-auth.state / next-auth.pkce.code_verifier | Strictly necessary | Proves a social sign-in started here and was not injected by someone else. | 10 minutes |
| mcos_ws | Strictly necessary | Remembers which workspace you last opened, so a deep link opens the right one. | 30 days |
| mcos_consent | Strictly necessary | Stores the choice you made in the banner, so we do not ask again. It records only the two optional categories and a random id. | 180 days |
| _ga / _ga_* | Analytics | Google Analytics 4, and only if you allow analytics. Distinguishes visits and sessions so we can see which pages are used. | Up to 2 years |
| YouTube (third-party) | Marketing | Only set after you press “Load video” on an embed. YouTube then receives your IP address and may set its own cookies. | Set by YouTube |
Cloudflare Web Analytics is also enabled. It is cookieless: it stores nothing on your device and does not fingerprint you, which is why it does not appear above.
For the wider picture of what we store and why, read the Privacy Policy. To ask a question about a specific cookie, contact us.
Legal entity
ADEPT HORIZON ENTERPRISE LTD
Company registration number: 9467898