Cookie policy
Version 1 · last updated 20 October 2026
mxsin.com uses a small number of first-party cookies. We do not use analytics, advertising or any third-party tracking cookies, and we do not build profiles of visitors.
Essential (always on)
These are strictly necessary to provide the service you ask for, so under PECR and UK/Isle of Man data-protection law they do not need consent.
| Cookie | Purpose | Lasts |
|---|---|---|
MXSINSID | Your signed-in session and CSRF protection token | Until you close the browser, or 1 hour idle |
mx_consent | Remembers your cookie choice (version, choice, random id) | 6 months |
| Cloudflare Turnstile | Bot protection on the log-in, sign-up and reset forms. It is a security measure, not tracking; Cloudflare processes your IP and browser signals only to tell people from bots. See Cloudflare's privacy policy. | Session |
roundcube_sessid, roundcube_sessauth | Webmail session (mailbox users only) | Session |
Preferences (only with your consent)
| Cookie | Purpose | Lasts |
|---|---|---|
MXSINREM | “Remember me for 30 days”: a random selector and secret; we store only a hash. It changes every time it is used. | 30 days |
MXSINTD | “Trust this device”: skips the 2FA prompt on this browser | 30 days |
colorMode | Light or dark theme in webmail | 1 year |
Changing your mind
Use Cookie settings (also in the footer of every page) at any time. Withdrawing consent deletes the preference cookies straight away. We keep a log of consent choices (time, choice, random id, IP and browser) as a record.
Questions: privacy@mxsin.com. See also our privacy notice.