Cookie policy.
Effective 1 January 2026. We use four categories of cookies: strictly necessary, preference, analytics, and advertising. Only the first category is set without consent.
[01]Strictly necessary
Set without consent on the basis of legitimate interest in the secure operation of the site (GDPR Recital 49; ePrivacy Directive Art. 5(3) exemption).
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
ma_consent | mafinance.xyz | Stores your consent decisions (TCF v2.3 TC string) | 13 months |
ma_session | mafinance.xyz | CSRF token for the contact form | Session |
test_cookie | doubleclick.net | Tests whether your browser supports cookies | 15 minutes |
[02]Preference
Set only with consent. Currently none. Reserved for future locale or display-density preferences.
[03]Analytics
Set only with consent. We do not currently run third-party analytics. Server log review is performed in aggregate without cookies.
[04]Advertising — Google AdSense
Personalised advertising cookies are set only with consent. If consent is withheld, AdSense serves non-personalised ads using a reduced cookie set (frequency capping only).
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
__gads | mafinance.xyz (Google) | AdSense impression count and frequency cap | 13 months |
__gpi | mafinance.xyz (Google) | AdSense Publisher Identifier | 13 months |
IDE | doubleclick.net | Conversion tracking and ad selection | 13 months |
NID | google.com | Google preferences and security | 6 months |
DSID | doubleclick.net | Cross-device ad personalisation | 2 weeks |
ANID | google.com | Ad personalisation across Google services | 13 months |
[05]How to withdraw consent
Click Cookie settings at any time, or visit adssettings.google.com to opt out of personalised advertising across all Google publishers. Browser-level cookie deletion will also withdraw consent (you will be re-prompted on your next visit).
[06]Do Not Track and GPC
The legacy Do Not Track header is ignored (not deployed consistently across browsers). The Global Privacy Control signal is honoured as a withdrawal of consent for personalised advertising and as a Do-Not-Sell/Do-Not-Share request under CCPA/CPRA.