Legal
Cookie policy
This page lists every cookie, storage key and outside request the Magpie app (the place you paste your website, watch your build and manage your site) uses in your browser, and why. It is generated from the same list our code uses, so it is always complete.
- Nothing optional runs or is stored until you say yes. Saying no is exactly as easy as saying yes.
- You can change your mind any time: .
- If your browser sends Global Privacy Control, we treat it as a no to analytics and marketing.
- Your choice lasts 12 months, and we ask again sooner if this policy changes.
- We keep a record of each choice (a random id, the choices, this policy version and the time — nothing that identifies you) as proof.
- Fonts are served from our own domain, so loading a page never sends your address to Google.
NecessaryAlways on
Needed for Magpie to work and to keep it secure: signing you in, letting this browser reopen the builds it started, payments you start, push notifications you switched on, and remembering your cookie choice. These can't be switched off. They are exempt from consent under the ePrivacy rules because they are strictly necessary for a service you asked for.
| Name | Type | Provider | Purpose | How long |
|---|---|---|---|---|
magpie_consent | Cookie | Magpie | Remembers your cookie choices: which categories you allowed, the policy version, when, and a random id for our consent log. Needed to respect your choice. Contains no personal data. | 12 months |
__Secure-neon-auth.session_token | Cookie | Magpie (sign-in by Neon Auth) | Keeps you signed in. | Your sign-in session (set by Neon Auth) |
__Secure-neon-auth.local.session_data | Cookie | Magpie (sign-in by Neon Auth) | A short signed cache of your session so pages load faster. | Up to 5 minutes |
__Secure-neon-auth.session_challenge | Cookie | Magpie (sign-in by Neon Auth) | Protects Google sign-in (a one-time check exchanged when you come back from Google). | Minutes, during sign-in |
hs_anon | Cookie | Magpie | Lets this browser open and keep the builds it started before you signed in. Only used for analytics when you allow Analytics. | 12 months |
hs_admin_bypass | Cookie | Magpie (staff only) | Staff sign-in for Magpie's own test tools. Never set for visitors. | 12 hours |
mg-nextup-later-<site>-<card>, mg-opp-shown-<idea> | Session storage | Magpie | Manage: the "Not now" cards you set aside, and ideas already shown, in this tab. Tab-only interface state for a page you opened. | Until you close the tab |
/sw.js (push notifications) | Service worker | Magpie | Delivers the build notifications you switched on. Installed only after you say yes to notifications. | Until you turn notifications off |
checkout.stripe.com, billing.stripe.com | Request | Stripe | Payments happen on Stripe's own pages when you pay; Stripe sets its own cookies there for payment and fraud prevention. No Stripe script runs on Magpie's pages. | Set by Stripe, on Stripe's pages |
challenges.cloudflare.com (Turnstile) | Request | Cloudflare | Spam protection on enquiry forms that switch it on: tells people from bots before a form is sent. Security, so exempt. | During the check |
*.public.blob.vercel-storage.com | Request | Vercel (our hosting) | Serves the images and files of your builds from our storage. | No cookies |
Fonts (/fonts/*) | Request | Magpie | Plus Jakarta Sans and your brand's fonts are served from Magpie's own domain. Google Fonts are fetched by our server, never by your browser. | No cookies |
PreferencesYour choice
Remembers small choices you make in the app between visits — a tour you finished, a tip you dismissed, your recent searches in Manage. Switched off, Magpie still remembers them, but only until you close the tab (session storage), which needs no consent.
| Name | Type | Provider | Purpose | How long |
|---|---|---|---|---|
mp_tour:<build> | Local storage | Magpie | You finished or skipped the preview tour. | Until cleared |
mp_lines:<build> | Local storage | Magpie | Which waiting-screen lines you have already seen, so they don't repeat. | Until cleared |
mp_continue_dismissed:<build> | Local storage | Magpie | You closed the "continue your build" note. | Until cleared |
mg_notify_asked:<build> | Local storage | Magpie | We already asked whether you want build notifications. | Until cleared |
mg_install_seen | Local storage | Magpie | You've seen the "Add Magpie to your Home Screen" tip. | Until cleared |
mg-search:<site>:<you> | Local storage | Magpie | Manage: your recent items and searches on this site. | Until cleared |
bdh.attention.sound | Local storage | Magpie | Build theatre: the chime you switched on or off. | Until cleared |
magpie_studio_panels, magpie.studio.panel.<panel> | Cookie | Magpie | Studio: the panel sizes you picked, so the page opens the way you left it. | 12 months (this visit only without consent) |
AnalyticsYour choice
PostHog, hosted in the EU and reached through our own domain, records how Magpie is used: pages viewed, clicks, errors, page speed and session replays with everything you type hidden. We use it only to improve Magpie. Nothing is loaded or stored until you say yes; saying no later stops it and removes its cookies.
| Name | Type | Provider | Purpose | How long |
|---|---|---|---|---|
ph_<project>_posthog | Cookie | PostHog (EU) | PostHog's random visitor id, session id and settings (also kept in localStorage). | 12 months |
ph_<project>_window_id, ph_<project>_primary_window_exists | Session storage | PostHog (EU) | Ties a session replay to this tab. | Until you close the tab |
hs_ph_uid | Local storage | Magpie | The account last linked to analytics in this browser. | Until cleared |
hs_signin_method | Session storage | Magpie | How you signed in (email or Google), for the sign-in event. | Until you close the tab |
mp_visit:<build> | Local storage | Magpie | How many times you've opened a build (return-visit stats). | Until cleared |
hs_ph_alias | Cookie | Magpie | Notes that your pre-sign-in activity was joined to your account in analytics (once). | 12 months |
hs_vid | Cookie | Magpie | Counts a replay view once per day per browser. Without consent the view is still counted once a day, without a cookie (a daily-changing hash on our server). | 12 months |
/ingest/* (eu.i.posthog.com) | Request | PostHog (EU) | Analytics events and session replays, sent through Magpie's own domain to PostHog's EU cloud. | — |
MarketingYour choice
Lets us credit the partner or friend who sent you to Magpie with a referral cookie. We don't run advertising trackers and never sell your data. Without consent a referral can still be recorded on your sign-up or build, but no referral cookie is set.
Nothing in this category is used yet. If that changes, it will be listed here and you will be asked first.
Websites Magpie builds
This policy covers the Magpie app. The websites Magpie builds for businesses belong to those businesses, and each one has its own cookie policy.
More
Your rights over personal data, and how to contact us, are in our privacy policy. You can also clear cookies and site data at any time in your browser’s settings.