Cookie Policy

What are cookies?

Cookies are small text files stored on your device when you visit a website. We also use closely related technologies such as local storage in your browser where wallet-connection tools need it. This policy covers cookies and, where relevant, similar storage.

1. Strictly necessary (always active)

These are required for the site to function securely. You cannot opt out of them without losing core features (e.g. staying signed in).

• Authentication session — Our sign-in system (Auth.js / NextAuth) sets HTTP-only, secure (on HTTPS) cookies to keep you logged in and to protect sign-in from cross-site request forgery. Exact cookie names may change with framework updates; they always serve these security and session purposes. Session lifetime is aligned with our sign-in settings (typically up to 30 days of activity, subject to logout).
• Terms of Service bridge — Cookie name: tos-accepted. Set when you accept our Terms on the in-app flow. HTTP-only, SameSite=Lax, used only so our servers can confirm you have accepted the current Terms gating without waiting for a full session refresh. Max age: up to one year unless cleared.

2. Analytics and performance

We use Vercel-hosted tools to understand aggregate traffic and performance (page views, Core Web Vitals). These help us keep the site fast and reliable. They are not used to show you ads on MyPact. We only load these tools in your browser after you opt in via the cookie banner ("Accept all" or Analytics enabled under "Manage choices"), or equivalent saved preference.

• Vercel Analytics — see Vercel's Analytics privacy policy.
• Vercel Speed Insights — performance metrics; see Vercel's privacy policy.

You can change your choice anytime from Cookie settings in the site footer.

3. Error monitoring

Sentry in the browser may set small identifiers or use browser storage to correlate error reports. We configure Sentry to avoid sending email, wallet addresses, or payment card data in error events. The browser Sentry SDK runs only if you opt in to error reporting ("Accept all" or that toggle under "Manage choices"). Server-side error reporting may still run independently for platform stability. See Sentry's privacy policy.

4. When you use payments or connect a wallet

• Stripe (Checkout, Billing Portal, or related flows) may set cookies or use storage on Stripe's domains. Governed by Stripe's cookie policy.
• Wallet providers (e.g. browser extension, WalletConnect, Coinbase Wallet) may use cookies or local storage on their own domains or in embedded contexts. Those are controlled by each provider's policies, not by MyPact.

How to control cookies

Most browsers let you block or delete cookies. Blocking strictly necessary cookies may prevent sign-in or cause unexpected logouts. Signing out of MyPact clears our session cookies for this site. You can also clear site data for mypact.net in your browser settings.

Changes

We may update this Cookie Policy when we add or remove technologies. The "Last updated" date at the top will change when we do.

Contact

Questions about this policy: legal@mypact.net.