Cookie Policy

1. What cookies we actually use

Multiverse League sets exactly one cookie today:

Name	Category	Purpose	Duration
mtgl_session	Strictly necessary	Keeps you signed in between requests. Without it, the site can't recognize your account.	Up to 30 days, or sooner after 8 hours of inactivity.

We currently run no analytics, advertising, or marketing cookies or scripts of any kind — nothing to opt in or out of beyond the one above. If that ever changes, any new non-essential cookie will only load if your saved choice above allows it.

2. Why we still ask

A strictly-necessary cookie like ours is exempt from requiring consent under both the EU's GDPR and California's CCPA/CPRA — it's required for the Service to function at all, so it's set the moment you sign in regardless of your choice above. We show the notice anyway so you have a clear, upfront record of what's used and a real, working control for anything we add later, rather than finding out about it after the fact.

3. What each option does

Accept All — allows the strictly- necessary cookie (always on) plus any functional, analytics, or marketing cookie we introduce in the future.
Only Essentials — allows only the strictly-necessary cookie; any future non-essential cookie stays off until you change this choice.
Reject All — same effect as "Only Essentials" today (there's nothing else running yet), recorded as its own distinct choice so it's clear you actively declined rather than just not having decided.

4. Your rights under GDPR

If you're in the EEA/UK, you have the right to give or withdraw consent for non-essential cookies at any time (see the control above), and the broader data rights described in our Privacy Policy — access, correction, deletion, and objection to processing.

5. Your rights under CCPA/CPRA

If you're a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of on that front today. If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out request and automatically apply "Reject All" for you, without needing to show this notice at all.

6. Managing cookies in your browser

You can also block or delete cookies through your browser's own settings. Doing so may sign you out or prevent the site from keeping you signed in, since the one cookie we set is required for that.

7. Changes to this policy

We'll update this page if what we collect changes — for instance, if we ever add an analytics or marketing cookie, it will be listed in the table above before it's allowed to load for anyone who hasn't opted in.