Cookie Policy
Last updated: 13 July 2026. What we store in your browser when you use Mantler, and why. Short version: one sign-in cookie, some functional local storage, and cookieless analytics. The only advertising tracker is the Meta Pixel, and it loads only if you accept it in our consent banner. Decline, and nothing marketing-related is ever set.
1. The one cookie we set
When you sign in we set a single, strictly necessary cookie named tt_session. It keeps you logged in so you can return to your assessment and reports. It is HttpOnly (not readable by scripts), SameSite=Lax, sent only over HTTPS in production, and it expires after 30 days or when you log out. It is a signed session token, not a tracking identifier, and it is never shared with anyone. Because it is essential to a service you asked for, it is exempt from consent under EU ePrivacy rules.
2. Functional storage in your browser
To carry your answers across the steps of the assessment without losing them, we store a little data in your browser's local storage (not cookies): your in-progress questionnaire answers and your calibration draft. This stays on your device, is used only to remember where you were, and is not used to track you. You can clear it any time in your browser.
3. Analytics, without cookies
We measure how the site and the assessment funnel are used with Vercel Web Analytics. It is privacy-first by design: it sets no cookies, collects no personal data, and does not track you across other websites. It only tells us aggregate things like which pages are viewed and where people drop off in the funnel, so we can improve the product. Our legal basis is our legitimate interest in understanding and improving the service. Because nothing is stored on or read from your device for this, it does not require a consent banner.
4. Advertising measurement, only if you accept
When we run ads, we use the Meta Pixel to measure whether they work: it records that a visit or an assessment came from one of our ads. It sets cookies (such as _fbp) and shares limited event data with Meta Platforms Ireland, which counts as cross-site advertising tracking. Because of that, it is never loaded until you opt in. The first time it is active you will see a short banner with Accept and Decline. If you decline, or simply do not accept, the pixel and its cookies are never loaded and no data goes to Meta. Our legal basis is your consent, which you can withdraw at any time by declining the banner or clearing your browser storage for this site (the choice is remembered under mantler_consent_marketing). When we are not running ads, nothing marketing-related loads at all.
5. Fonts
Some pages currently load a web font from Google Fonts, which means your browser contacts Google to fetch it. Google may receive your IP address as part of that request. No cookie is set by this. We are moving to self-hosted fonts to remove this external request entirely.
6. Managing what is stored
You can clear cookies and local storage, or block them, in your browser settings. Note that clearing or blocking the tt_session cookie will log you out and you will not be able to stay signed in.
7. Changes
We may update this policy. The current version always lives on this page, with the date shown above. For how we handle personal data more broadly, see our Privacy Policy.