Cookie Policy
Last updated October 2026
This page lists every cookie MultiPost Studio sets, what it is for and how long it lasts. We keep it short on purpose: there are two groups, and only one of them needs your permission.
Essential cookies
These make sign-in and the app work. They are always on, and they do not track you across other sites. Blocking them will stop you signing in.
| Cookie | What it does | Lasts |
|---|---|---|
authjs.session-token (__Secure-authjs.session-token on the live site) | Keeps you signed in. | Up to 30 days |
authjs.csrf-token, authjs.callback-url (prefixed __Host- / __Secure- on the live site) | Protects the sign-in form from forged requests and returns you to the page you wanted. | Session |
mps_ws | Remembers which workspace you have open. | 1 year |
mps_oauth_state, mps_int_oauth_state | A one-time security token used only while you connect a social account or a Google service, so the connection cannot be hijacked. | Minutes |
mps_aff_code | Only set if you create an account after following an affiliate link. It credits the person who referred you. | 1 hour |
mps_consent | Remembers your answer to the cookie question on this page. | 1 year |
sidebar_state | Remembers whether you collapsed the app sidebar. | 7 days |
Your theme and which navigation sections you have collapsed are kept in your browser's local storage, not in cookies, and are never sent to us.
Analytics cookies (need your permission where the law requires it)
We use these to understand which pages and which campaigns bring people to MultiPost Studio, so we can spend our effort on what works. We do not use them for advertising and we do not build advertising profiles.
| Cookie | What it does | Lasts |
|---|---|---|
mps_vid | A random identifier (no name or email) so we can count unique visitors rather than page loads. | 1 year |
mps_ft | Remembers where you first came from (for example a campaign link or a search engine) so that, if you sign up, we know which campaign worked. | 90 days |
mps_lt | Remembers the most recent campaign link you arrived from, for the same purpose. | 90 days |
_ga, _ga_<id> | Google Analytics 4: counts visits and shows which pages are used. | Up to 2 years |
The three mps_ cookies are first-party: they are set by us, and the visit record they feed contains the page you landed on, the campaign tags in the link (the utm_ parameters), the website you came from and a random identifier. It contains no IP address, no browser fingerprint, and no name or email. If you then create an account, we store the campaign and source alongside it so we can see which campaigns produce real customers; that record is removed when your account is erased. Anonymous visit records are deleted after 400 days.
Google Analytics is provided by Google LLC. It sets its own cookies on this site and sends usage data to Google. Google states that Google Analytics 4 does not log or store IP addresses. See how Google uses information from sites that use its services.
When we ask, and when we don't
- European Economic Area, United Kingdom, Switzerland and India: analytics cookies stay off until you press Accept.
- Anywhere we cannot tell where you are: treated the same way, and analytics stay off until you accept.
- Everywhere else: analytics run by default and you see the same notice, with an equally easy Decline. If you would rather be asked first, press Decline.
- If you press Decline in any region, we stop, and we delete the analytics cookies listed above that are already on your device.
- Do Not Track and Global Privacy Control: if your browser sends either signal, analytics stay off everywhere, whatever else is set.
Declining analytics changes nothing about how the product works for you.
Change your mind at any time
to accept or decline again. You can also clear or block cookies in your browser; see the help pages for Chrome, Firefox and Safari.
What we don't use
No advertising cookies, no social-media tracking pixels, no cross-site tracking, and no session-replay tools. We do not sell or share cookie data for marketing.
More
Our Privacy Policy explains how we handle personal data generally. Questions about cookies: [email protected].