This is an English translation of the Romanian original. The Romanian version is the legally binding one; if the two differ, the Romanian version prevails.
This policy explains which cookies and browser storage Manifolio uses, under Romanian Law no. 506/2004 and the GDPR. In short: at the date of this version we use no tracking or advertising cookies, and the admin has a single, strictly necessary cookie.
1. manifolio.com
- Cookies: the site sets no cookies. At the date of this version, the responses of manifolio.com and app.manifolio.com set no cookies,
__cf_bmincluded.__cf_bmis set only by Cloudflare Bot Management, when that protection is active for a request; it is strictly necessary, tells people apart from automated programs, lasts at most 30 minutes and is not used for tracking. We may turn on that protection, or similar strictly necessary protections, without any other change on our side. - Statistics are cookie-less and write nothing to the browser; how they work is in the Privacy Policy.
- Local storage: a few display preferences (for example the language or the logo variant in the interactive demos), in keys starting with
mf-, are saved inlocalStorageonly after you use that control. They never leave the browser. - The cookie notice: the card at the bottom of the page tells you that we use only what is strictly necessary. When you press “OK”, the choice is saved in
localStorage(mf-cookie-notice), so the card does not appear again. In “Settings” you can see the categories: strictly necessary (always on); analytics and marketing cookies: none at the date of this version.
2. The admin (app.manifolio.com)
The table shows the items used at the date of this version; names and durations may evolve with the application.
| Name | Type | Purpose | Duration |
|---|---|---|---|
__Host-mf_session | strictly necessary cookie (HttpOnly, Secure, SameSite=Lax) | keeps you signed in | at most 30 days; expires after 7 days without use or when you sign out |
mf-lang | localStorage | interface language | until you clear it |
mf-last, mf-last-type:* | localStorage | the last project opened and the last content type created | until you clear it |
mf-recent, mf-searches | localStorage | recently opened items and recent searches, for quick search | until you clear it |
mf:draft:* | localStorage | a local copy of unsaved changes, so they are not lost if the connection drops | until saved or discarded |
mf-login-email | sessionStorage | the email address typed during sign-in | until you close the tab |
mf-cookie-notice | localStorage | remembers that you closed the cookie notice on the sign-in page | until you clear it |
The session cookie is strictly necessary for the service you asked for, so it does not require consent (article 4(5) of Romanian Law no. 506/2004). Data in localStorage and sessionStorage stays in your browser and is not sent to us.
3. Preview and the visual editor
Preview links use a signed token in the address (mf_preview), valid for 30 minutes, not a cookie. While your site is open in the visual editor, the bridge.js script remembers the scroll position in sessionStorage (mf-scroll), so the page returns to the same place after a reload.
4. Our customers’ sites
The t.js script sets no cookies and writes nothing to the browser. Any other cookies on a site built with Manifolio are chosen by that site’s owner, who is also responsible for informing its visitors.
5. How to control them
You can delete cookies and stored data at any time in your browser settings. If you delete the session cookie, you will be signed out of the admin.
6. Changes
We may update this policy when we add, change or remove cookies or storage items. Strictly necessary or preference items, which do not require consent, are added by updating this page. If we ever use cookies or technologies that require consent (for example for analytics or marketing), we will ask for your consent first, and you will be able to withdraw it at any time.
Questions: privacy@manifolio.com.