Cookie Policy

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the site owner. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (remain on your device until they expire or you delete them).

ManaGate also uses similar technologies such as localStorage (browser-based storage that persists across sessions) and sessionStorage (cleared when the tab closes). For the purposes of this policy, we refer to all of these collectively as “cookies.”

2. How we use cookies

We use cookies for the following purposes:

Essential functionality: To authenticate you, maintain your session, and remember your preferences (such as selected language).
Security: To detect and prevent fraudulent activity and protect your account.
Performance: To understand how the platform is used in aggregate, so we can improve it. All analytics data is anonymized.

We do not use cookies for:

Third-party advertising or retargeting.
Cross-site tracking or behavioral profiling.
Selling your data to data brokers.

3.1 Strictly necessary cookies

These cookies are required for the Service to function. They cannot be disabled without breaking core features. We do not need your consent to set them (LGPD Art. 7, V; ePrivacy Directive recital 25).

Name	Type	Expires	Purpose
`mg_session`	Cookie (HTTP-only)	30 days	Authenticates your logged-in session. HttpOnly + Secure flags prevent JavaScript access.
`mg_csrf`	Cookie	Session	CSRF protection token — prevents cross-site request forgery attacks.
`mg_lang`	localStorage	Persistent	Stores your selected UI language (e.g. “pt-br”) so it persists between visits.

3.2 Functional cookies

These cookies remember choices you make to improve your experience. Disabling them may affect some non-critical features.

Name	Type	Expires	Purpose
`mg_deck_view`	localStorage	Persistent	Remembers your preferred deck display mode (list vs. grid).
`mg_col_sort`	localStorage	Persistent	Remembers your preferred collection sort order and active filters.
`mg_price_currency`	localStorage	Persistent	Remembers your selected price currency (USD / EUR / BRL).

3.3 Analytics cookies

We use anonymized, first-party analytics to understand how the platform is used. No personal data or card collection data is included in these events. Your IP address is truncated before storage.

Name	Type	Expires	Purpose
`mg_anon_id`	localStorage	12 months	Random anonymous identifier used to count unique sessions without identifying you. Rotated annually.

We do not use Google Analytics, Meta Pixel, or other third-party analytics services that place their own cookies or track you across other websites.

4. Third-party cookies

ManaGate loads fonts from Fontshare (api.fontshare.com). This is a CDN request that may set cookies or record your IP address under Fontshare’s own privacy policy. We do not control these cookies. To avoid Fontshare requests, you can self-host fonts or use a browser extension to block font CDNs.

Card price data is fetched server-side from TCGplayer, Cardmarket, and Liga Magic — your browser does not make direct requests to these services, so they do not set cookies on your device.

Under the LGPD (Brazil) and GDPR (EU), we rely on the following legal bases for cookie use:

Strictly necessary cookies: No consent required — they are necessary for contract performance and legitimate security interests (LGPD Art. 7 V/IX; GDPR Art. 6(1)(b)/(f)).
Functional and analytics cookies: Placed on the basis of legitimate interests. You can opt out at any time using the controls below.

If you are located in the EU/EEA, we will obtain your consent via a cookie banner on your first visit for any non-essential cookies, consistent with ePrivacy Directive requirements.

6. Managing and deleting cookies

6.1 Browser settings

You can control and delete cookies through your browser settings. The links below explain how to manage cookies in popular browsers:

Note: blocking essential cookies will prevent you from logging in to ManaGate.

6.2 Opt out of analytics

To opt out of our anonymized analytics, delete the mg_anon_id localStorage entry in your browser’s developer tools (Application → Local Storage → managate.app). Each page load without this key will be counted as a new anonymous session but no persistent identifier will be created if you set a mg_no_track key in localStorage to 1.

6.3 Account settings

Logged-in users can manage functional preferences (language, view modes) directly in the ManaGate account settings dashboard.

7. Cookie retention

Cookies and localStorage entries are retained only as long as necessary for their stated purpose. Session cookies are deleted when you close your browser. Persistent cookies expire as listed in the tables above. You can delete any or all cookies at any time through your browser settings.

8. Changes to this policy

We may update this Cookie Policy as our practices change or regulations require. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated with at least 30 days’ notice.

9. Contact

For questions about our use of cookies:

ManaGate — Privacy
Email: hello@managate.app
Subject line: Cookie Question