MyMysticDay
Cookie Policy
Every cookie and storage key this site sets, what it is for, how long it lasts, and how to change your choice.
This page lists every cookie and every storage key this site can set, what each one is for, and how long it lasts. It covers cookies in the ordinary sense and also the two other ways a site can keep something on your device — local storage and session storage — because § 25 of the German Digital Services Data Protection Act (TDDDG) treats all three the same way, and so do we.
The rule underneath all of it is simple. Storage that the site cannot work without is set without asking, because the law does not require consent for it and because asking would be theatre. Everything else waits for you to say yes.
Your choice, and how to change it
The first time you arrive, a panel offers Accept and Reject as two equally prominent buttons. Rejecting is one click, exactly like accepting; there is no pre-ticked box, no hidden second layer, and no cost to refusing. Making no choice at all counts as refusing, and analytics stay off.
Your choice is remembered on your device and nowhere else. You can change it at any time, in either direction, using the control below or by clearing this site's storage in your browser. Withdrawing consent is as easy as giving it, and takes effect immediately for the future; it does not undo measurement that already happened.
Essential storage
Set on every visit, with no consent required, under § 25 (2) no. 2 TDDDG: without it the service you have asked for cannot be provided.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| mymysticday_session | Cookie | Keeps you signed in and links your browser to your session on our server. Nothing in it identifies you to anyone else. | 2 hours after last activity |
| XSRF-TOKEN | Cookie | Security. Proves that a form was submitted from this site and not from a page pretending to be it. | 2 hours |
| mmd_tarot_visitor | Legacy cookie | A retired browser identifier previously used for complimentary deep-spread access. It is no longer created and is deleted when you open a tarot spread page. | Until your next spread visit; otherwise no more than 400 days |
| mmd-consent | Local storage | Remembers whether you accepted or rejected analytics, so that you are not asked again on every page. | Until you clear it |
| mmd-theme | Local storage | Remembers whether you chose the light or dark appearance. | Until you clear it |
These are set by us and read only by us. They are not shared, not sold, and not used to build a profile of you.
Analytics — only after you accept
These load only if you choose Accept. If you reject, or make no choice, none of the following is set, no request is made to these providers, and the site behaves exactly as it otherwise would.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes one browser from another so that visits can be counted without counting the same person twice. | 2 years |
| _ga_<container> | Google Analytics 4 | Holds the state of the current session for this property. | 2 years |
| _clck | Microsoft Clarity | Connects a browser to its Clarity user identifier so that repeat visits are recognised. | 1 year |
| _clsk | Microsoft Clarity | Groups the page views of a single visit together. | 1 day |
| CLID | Microsoft Clarity | Identifies the first visit from this browser to the site. | 1 year |
| MUID | Microsoft | Recognises a browser across Microsoft properties. Set by Clarity's own domain, not by us. | 1 year |
Google Analytics runs here with IP addresses truncated before storage, with Google Signals off, with advertising features off, and behind Google Consent Mode, which means the tag itself is told about your choice rather than merely being loaded after it. Microsoft Clarity records aggregated interaction — where a page is clicked, how far it is scrolled, where it is abandoned — with input masking on, so text you type into a form is not captured.
Legal basis: your consent, under § 25 (1) TDDDG for the storage itself and Art. 6 (1) (a) GDPR for what is done with the resulting data. What each provider receives, where it goes and how long it is kept is set out in the privacy policy.
Advertising
None. We run no advertising network, no advertising pixel and no remarketing tag on this site, and no cookie on this site is used to build an advertising profile of you. If that ever changes, the tool will be named in this table before it is switched on, it will sit behind the same consent, and rejecting will keep it off.
Things this site deliberately does not load
Fonts are served from our own servers in Germany rather than from a font CDN, so no request carrying your IP address goes to a third party in order to draw the text. There is no content delivery network in front of the site, no social media widget, no embedded video player and no comment platform. Every one of those is a common way for a third party to be handed your IP address without your knowing, and each is absent by choice rather than by oversight.
Turning cookies off in your browser
Every browser can block or delete cookies, and you are free to do so. Blocking essential cookies will sign you out and prevent forms from being submitted, because the security check that protects those forms depends on one. Blocking the optional ones changes nothing you can see.
Changes
This page is updated whenever a cookie is added or removed. A tool that stores something on your device is named here before it goes live, not after.
Last updated September 11, 2026
