Cookie Policy

Last updated 8 September 2026

Template — not finished.The operator name, contact address and governing jurisdiction are still placeholders. The global admin sets them in Admin › Instance. These documents have not been reviewed by a lawyer and are not legal advice.

Cookies this site sets

mir_autos_session — a signed, encrypted, HttpOnly cookie set once you sign in. It keeps you logged in, expires after 30 days or when you sign out, and is strictly necessary: without it the application cannot tell one signed-in request from another.
mir_oauth — a ten-minute cookie set only while you are in the middle of signing in with Google, GitHub, Microsoft or Facebook. It carries the anti-forgery state for that sign-in and is deleted when it completes.

There are no advertising cookies and no third-party cookies set by the application itself.

Storage in your browser

Your answer to the cookie notice is kept in your browser's localStorage under mir_autos_cookie_choice — deliberately, so that recording your choice does not itself set a cookie. Clearing site data brings the notice back. The app stores nothing else in your browser.

Analytics installed by the operator

The administrator of this instance has installed an analytics snippet from a third-party provider. It loads only after you choose “Accept all” on the cookie notice; choosing “Essential only” keeps it off, and you can change your mind by clearing site data. What it stores and collects is governed by that provider's policy, which the administrator should name here or in the Privacy Policy.

Embedded content

Manual steps may embed YouTube videos. They are loaded from YouTube's privacy-enhanced domain (youtube-nocookie.com), which limits — but does not always eliminate — what YouTube stores until you press play. Typefaces are loaded from Google Fonts, which sets no cookies.

Contact

[contact email]