TEMPLATE — requires review by a Swiss-qualified lawyer before publication. This document is a working draft prepared for MINON NAN. It is not legal advice. Values in [square brackets] are placeholders that must be completed and verified before the document is published or relied upon. The cookie list must be re-audited before each release.
This Cookie Policy supplements our Privacy Policy. It applies to minonnan.com, iapresales.minonnan.com, partners.minonnan.com and raminona.com.
1. What are cookies?
Cookies are small text files stored on your device by your browser. Similar technologies include local storage and pixels. We refer to all of them as "cookies".
2. Our approach
- Strictly necessary cookies are always active because the site cannot work without them.
- Analytics, personalisation and marketing cookies are used only after you have given your consent in our banner. Refusing is as easy as accepting.
- Without consent, we measure visits only in a cookieless and pseudonymised way with our self-hosted Matomo instance (no cookies, no cross-site tracking, no data shared with third parties).
- Your choice is stored for [12] months, after which — or when this policy changes materially — we ask again.
You can change or withdraw your consent at any time through the "Cookie settings" link in the footer of every page.
3. Categories
| Category | Purpose | Legal basis | Default |
|---|---|---|---|
| Necessary | Login, security (CSRF), cart, language, consent storage, referral attribution required for checkout integrity | Legitimate interest / necessary for the service | Always on |
| Analytics | Full Matomo statistics with a visitor id; funnel measurement | Consent | Off |
| Personalisation | A/B tests (VWO), remembering preferences beyond strictly necessary ones | Consent | Off |
| Marketing | [Google Tag Manager and advertising tags, if enabled] | Consent | Off |
4. Cookie list
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
mn_at | MINON NAN | Necessary | Session access token (HttpOnly) | 15 minutes |
mn_rt | MINON NAN | Necessary | Refresh token to keep you logged in (HttpOnly) | 30 days |
mn_csrf | MINON NAN | Necessary | Protection against cross-site request forgery | Session / 30 days |
mn_cart | MINON NAN | Necessary | Remembers your shopping cart | [30] days |
NEXT_LOCALE | MINON NAN | Necessary | Remembers your language | [1 year] |
mn_consent | MINON NAN | Necessary | Stores your cookie choices and policy version | [12] months |
mn_aff_iap | MINON NAN | Necessary [to be confirmed by counsel] | Records that you arrived through an IAPRESALES referral link so the commission can be attributed (signed, no profile) | 30 days |
mn_aff_ptn | MINON NAN | Necessary [to be confirmed by counsel] | Same for the PARTNERS programme | 30 days |
mn_vid | MINON NAN | Analytics | Pseudonymous visitor id for first-party statistics | [13] months |
_pk_id, _pk_ses | Matomo (self-hosted) | Analytics | Distinguish visits; only after consent | 13 months / 30 minutes |
_vwo_uuid, _vis_opt_*, _vwo_* | VWO (Wingify) | Personalisation | Assign and remember A/B test variants | up to [1 year] |
_ga, _gcl_* [if GTM is enabled] | Marketing | Measurement and advertising | up to 2 years | |
__stripe_mid, __stripe_sid | Stripe | Necessary (payment) | Fraud prevention during Stripe payments | 1 year / 30 minutes |
Payment pages hosted by Mollie or PayPal set their own cookies under those providers' domains; see their privacy notices.
Note for counsel: affiliate attribution cookies are classified here as necessary for contract performance with partners; several EU supervisory authorities consider them to require consent. Decide the classification before launch — the implementation supports gating them behind the marketing category.
5. Managing cookies in your browser
You can also delete or block cookies in your browser settings. Blocking necessary cookies may prevent login, cart or checkout from working.
6. Contact
Questions about this policy: [privacy@minonnan.com].
Version 2026-10-01 — template, not yet in force.