Cookie Policy
Last updated: 2026-07-13
1. What are Cookies
Section titled “1. What are Cookies”Cookies are small pieces of data stored in your browser by websites. Manako uses cookies and similar technologies (such as localStorage) to provide and improve our services.
2. Cookies we use
Section titled “2. Cookies we use”Manako uses two categories of cookies and browser storage.
2.1 Necessary Cookies (always on)
Section titled “2.1 Necessary Cookies (always on)”Required for basic site functionality. Disabling them prevents normal use of the service.
| Name | Purpose | Expiry | Attributes |
|---|---|---|---|
mk_at | Maintains authenticated session (access token) | 15 minutes | HttpOnly, Secure, SameSite=Lax |
mk_rt | Refreshes the access token (refresh token) | 7 days | HttpOnly, Secure, SameSite=Lax |
mk_sudo | Maintains re-authentication state before sensitive actions (API key management, disabling MFA, etc.) | 15 minutes | HttpOnly, Secure, SameSite=Lax |
manako-ui-lang (localStorage) | Language preference | Persistent | - |
manako-theme (localStorage) | Dark/light theme preference | Persistent | - |
| Cloudflare Turnstile token | Bot protection (security) | Session | - |
mk_at, mk_rt, and mk_sudo are host-only cookies with no Domain attribute set, so they are only sent to api.manako.dev. Because they are HttpOnly, they cannot be read from JavaScript, and the dashboard (SPA) never stores authentication data in localStorage or similar storage.
2.2 Analytics Cookies (user choice)
Section titled “2.2 Analytics Cookies (user choice)”Used for usage analytics. Enabled only after user consent.
| Name | Purpose | Destination | Expiry |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 traffic analytics | Google (USA) | 2 years |
| GTM container cookies | Google Tag Manager container | Google (USA) | Session to 2 years |
3. Consent management
Section titled “3. Consent management”On first visit, we display a cookie consent banner with the following options:
- Accept: enable all cookies including analytics
- Reject: use only necessary cookies (GA4 will not fire)
- Settings: choose per category
Your choice is remembered for 180 days. After that, the banner is shown again.
4. Withdrawing consent
Section titled “4. Withdrawing consent”You can withdraw consent at any time by deleting the manako-cookie-consent key from browser localStorage and reloading the page.
5. Third-party data transfers
Section titled “5. Third-party data transfers”If you accept analytics cookies, the following information may be sent to Google LLC:
- URL visited, referrer, browser info, screen resolution
- Anonymized IP address
- Click events on Manako (e.g.
signup_complete)
See Google’s Privacy Policy for details.
6. GDPR / Japanese Telecom Act Compliance
Section titled “6. GDPR / Japanese Telecom Act Compliance”- GDPR (EU/EEA): analytics cookies are not fired before explicit consent (GTM Consent Mode v2)
- Japanese revised Telecommunications Business Act: data transfer destinations and purposes are disclosed on this page
7. Contact
Section titled “7. Contact”For questions about cookies or personal data, please use the contact details in our Privacy Policy.