Cookies

These are always on. Without them you couldn't sign in or sign up safely. None of them track you across other sites.

• __Secure-better-auth.session_token30 days, renewed as you use it

  Keeps you signed in on mantaglow.com and the apps on its subdomains. Secure and HTTP-only, so page scripts can't read it. Removed when you sign out.

• __Secure-better-auth.stateA few minutes

  Links the round trip when you sign in with Google, Microsoft or Apple, so nobody can slip in a sign-in of their own.

• human_verified30 minutes

  Remembers that you passed the bot check before signing up with Google, Microsoft or Apple.

• beta_preauth30 minutes

  Holds an invite code you entered until you finish signing up.

• mg_ref30 days

  Set only when you open someone's referral link, so they get credit when you sign up.

• mg_theme1 year

  Your light or dark choice for the dashboard, set only if you pick one.

• sidebar_state7 days

  Whether the dashboard sidebar is open or collapsed.

• mg_attr90 days

  Set when you arrive from a campaign link or another website. It keeps the campaign tags in the link (utm_source and the like), the page you landed on and the referring site, so we can see which posts and ads bring people in. Ad click IDs (such as gclid or fbclid) are added only if you allow marketing.

It's a first-party cookie: only mantaglow.com reads it, and it's saved with your account if you sign up.

• darian_cookie_consentUntil you change it

  Your cookie choice, so we don't ask again. Local storage.

• _sidUntil you close the tab

  A random ID that ties one tab's page views together for our own analytics. Session storage.

• __df_deploy_banner_*Until cleared

  Signed-in pages only: remembers that you dismissed a “new version” notice.

We measure page views ourselves: the page, how long it was open, the referring site, browser type and approximate country, tied to the tab ID above. It stays on our servers and sets no cookies. There are no third-party analytics tools. Turn analytics off in cookie settings and we stop recording your page views.

When we advertise on Meta, Google or Reddit, their pixel tells them when someone from an ad signs up, so we can see which ads work. A pixel loads only after you allow marketing in cookie settings, and only for platforms we actually run ads on. If you never allow marketing, none of them load.

Once loaded, each sets its own cookies, for example _fbp (Meta), _gcl_au (Google) and _rdt_uuid (Reddit). Their own policies say how they use them.

• Cloudflare Turnstile runs on the sign-up, request-access and app waitlist forms to tell people from bots. It loads from Cloudflare only on those pages.
• Fonts load from Fontshare, which sees your IP address the way any web host does. No cookies.
• Google, Microsoft, Apple and Stripe: when you sign in with one of them or pay through Stripe, you're on their site for that step, and their cookie policies apply there.

Open cookie settings to turn analytics or marketing on or off. Your choice is saved in this browser, so set it again on other browsers or devices.

Turning marketing off stops ad pixels from loading on your next visit or reload. Cookies a pixel already set stay until they expire or you clear them, which you can do in your browser's site settings for mantaglow.com. Clearing all site data also signs you out and brings the cookie banner back.

See the Privacy Policy for what we collect and why, or email contact@mantaglow.com.