Cookie Policy
Last updated: August 20, 2026
Everything mtg-agents.com stores on your device, what it is for, and how long it lasts. There is nothing beyond the list below.
Cookies, local storage and session storage
A cookie is a small text file your browser stores and sends back to us with each request. Local storage is the same idea but never sent automatically; session storage is erased when you close the tab. The law treats all three alike.
Everything we use is first-party — set by mtg-agents.com, readable only by mtg-agents.com. No advertising network, analytics provider or social platform sets anything here.
Why there is no cookie banner
Under § 165 Abs 3 TKG 2021 — Austria's implementation of Article 5(3) of the ePrivacy Directive — storing anything on your device needs your consent unless it is strictly necessary to carry out a communication, or to provide a service you explicitly asked for.
Everything below is the second kind: the sign-in you requested, the interface you arranged, the notice you dismissed, the free allowance you are using. Nothing rests on your consent, so there is none for you to give, withdraw or manage, and a preferences panel would offer a choice that does not exist. We must still tell you what we store, which is what this page does.
Ticking "Keep me signed in" is not a consent choice — the cookie is necessary either way, and the box only changes how long it lasts.
What we store on your device
| What it is for | How long it lasts |
|---|---|
Signing you in, and keeping that safeKeeps you signed in, returns you where you came from, and protects the sign-in against cross-site attacks.Cookienext-auth.session-token, __Secure-next-auth.session-token, next-auth.session-token.0, next-auth.session-token.1, next-auth.csrf-token, __Host-next-auth.csrf-token, next-auth.callback-url, __Secure-next-auth.callback-url, nissa_remember | Until you close your browser — or 90 days if you ticked “Keep me signed in”. Signing out clears them immediately. |
Remembering how you like the interfaceYour sidebar, deck view, sort order, grouping and last-used format, so the site looks the way you left it.CookieLocal storagesidebar_state, sidebar_groups, nissa:deck-view-preference, nissa:deck-sort-preference, nissa:last-deck-format, deck-view-group, deck-view-sort, deck-view-mode, deck-section-*, card-search-active-deck-id | 30 days for the sidebar cookies; the rest until you clear your browser data. |
Remembering the notices you have dismissedThat you closed a banner, or already followed a one-time prompt, so it is not shown again straight away.Local storagenissa:chat-card-dismissed, christmas-coffee-banner-2024-dismissed, guest-signup-banner-dismissed, survey-feedback-banner-dismissed, search-beta-feedback-banner-dismissed | 24 hours to 7 days for the banners, then removed automatically. The one-time prompt lasts until you clear your browser data. |
Keeping the free tier usableCounts free messages and deck-loader opens used without an account, so one visitor cannot exhaust the shared daily allowance. Counts only — no message content.Session storageguest-chat-limit, deck-loader-guest-opens | The current browser tab only. Never written to disk. |
Generated from our source code, so it cannot fall out of step with what we store.
What we do not do
Because these are the things a cookie policy usually hides:
- No third-party analytics. There is no analytics cookie here because there is no analytics provider.
- No advertising, and no advertising cookies. We serve no ads and run no ad network.
- No cross-site tracking, no tracking pixels, no fingerprinting, no profiling across other websites.
- No third-party scripts at all. Our Content Security Policy permits no external script, stylesheet, font or frame. The only outside content your browser loads is images — card art from Scryfall and the Buy Me a Coffee button — and neither stores anything on your device. See Section 5.3 of our Privacy Policy.
- We do not sell or share any of this. Nothing above leaves your device for a third party.
Your controls, and your rights
Every browser lets you view, delete and block cookies and site data without asking us. Deleting the sign-in entries signs you out, and blocking them stops you signing in at all; deleting the rest is harmless. Signing out clears your session immediately.
Your rights over your personal data — access, rectification, erasure, restriction, portability, and objection under Article 21(1) — are in Section 7 of our Privacy Policy. Section 12 has our contact details, and your right to complain to the Austrian Data Protection Authority. Questions about this page: [email protected].