Cookie Policy

1. What Are Cookies

Cookies are small text files a website stores in your browser, typically to remember who you are between visits.

2. The Cookies We Use

MV Sign uses only cookies that are strictly necessary for the service to work. They are set by MV Sign itself and are not used to track you:

• Session cookie (authjs.session-token) — set when you sign in, it keeps you logged in as you move around the app. Deleted when you sign out or the session expires.
• Security tokens (authjs.csrf-token, authjs.callback-url) — protect the sign-in form against forged requests and return you to the right page after signing in. Set when you open the sign-in page.
• Platform staff verification (mvsign_admin_2fa) — set only for White Sun platform administrators after they pass two-factor verification. It lasts 8 hours and is never set for ordinary users.

We don't use analytics cookies, advertising cookies, or tracking pixels — MV Sign doesn't run Google Analytics, Facebook Pixel, or anything similar today. Our website is delivered through Cloudflare, which handles the traffic for security and performance; we do not use Cloudflare for tracking.

Mobile apps. The MV Sign iPhone and Android apps do not use cookies. They keep your sign-in token in the phone's secure storage (iOS Keychain, Android encrypted storage) until you log out.

3. Third-Party Cookies

We don't currently set any third-party cookies.

4. Managing Cookies

Because these cookies are required to keep you signed in, blocking them will prevent you from using MV Sign while logged in. You can still clear them at any time through your browser's settings — doing so simply signs you out.

5. Future Changes

If we ever introduce analytics or other non-essential cookies, we'll update this policy first and ask for your consent where required, rather than adding them silently.

6. Contact Us

Questions about cookies on MV Sign? Email [email protected].