Legal
Cookie Policy
MsPinaQ LLC uses cookies and similar storage in the categories below. Policy version: 2. If the version changes materially, we will ask for consent again.
By default, non-essential categories are off. Analytics / advertising scripts load only with the matching consent. Google Analytics and AdSense are not live yet. Consent Mode v2 defaults (analytics_storage, ad_storage, ad_user_data, ad_personalization = denied) are set in the root layout via a beforeInteractive script before any Google tags.
Questions: mspinaq@gmail.com — use subject [Privacy] or [Cookies].
| Name / key | Provider | Category | Purpose | Duration | Party |
|---|---|---|---|---|---|
| mspinaq_cookie_consent / mspinaq-cookie-consentcookie | MsPinaQ | Strictly Necessary | Stores your cookie preference (categories, timestamp, policy version). | 1 year | First-party |
| authjs.session-token / authjs.csrf-token (and related Auth.js cookies)cookie | Auth.js / MsPinaQ | Strictly Necessary | Signed-in session (JWT) and CSRF protection for Google member login and admin login. Cookie names may use __Secure- or __Host- prefixes depending on the deployment environment. | Session JWT cookie: up to 30 days (rolling maxAge). CSRF cookie: short-lived / session-scoped per Auth.js. | First-party |
| sidebar_statecookie | MsPinaQ | Functional | Remembers admin sidebar open/closed state. Used only in the restricted administration interface; not set for ordinary visitors on public pages. | 7 days | First-party |
| mspinaq-saved-recipeslocalStorage | MsPinaQ | Functional | Guest saved-recipe list (legacy / migration). Not created on mere page load — only after an explicit Save action (or when migrating existing keys). Signed-in members use the server instead. | Until cleared by the user or browser | First-party |
| mspinaq-liked-recipeslocalStorage | MsPinaQ | Functional | Guest liked-recipe list (legacy / migration). Not created on mere page load — only after an explicit Like action (or when migrating existing keys). Signed-in members use the server instead. | Until cleared by the user or browser | First-party |
| mspinaq-engagement-migrated-v1localStorage | MsPinaQ | Strictly Necessary | One-time flag so guest likes/saves are not migrated twice after sign-in. Written only during that migration flow. | Until cleared | First-party |
| @vercel/analyticsscript | Vercel | Analytics | Cookie-free, privacy-oriented analytics. MsPinaQ currently loads it only after Analytics consent as an additional privacy safeguard. | No cookies; visitor hash discarded after ~24 hours (per Vercel) | Third-party |
| YouTube embed (iframe)script | Google / YouTube | Functional | Plays MsPinaQ videos. The iframe is not created until Functional consent is granted (placeholder shown otherwise). | Per YouTube after the embed loads | Third-party |
Advertising note
Before launching AdSense for users in the EEA, UK, and Switzerland, use a Google-certified IAB TCF CMP. This site’s custom cookie banner alone does not satisfy advertising requirements.