Legal
Cookie Policy
Last updated: 4 November 2026
We use only the cookies needed to run MSD securely. Optional analytics are off unless you switch them on, and do not use cookies. Change your choice at any time with .
Strictly necessary
These are essential for the Service and do not need consent under the Privacy and Electronic Communications Regulations (PECR).
| Name | Purpose | Duration |
|---|---|---|
__Host-msd_session | Keeps you signed in (HTTP-only, secure) | Up to 30 days; ends after 7 days of inactivity |
__Host-msd_csrf | Protects forms and requests against cross-site request forgery | Same as the session |
msd_oidc | Links a Google or Microsoft sign-in attempt to your browser | 10 minutes |
msd_consent | Remembers your cookie choice | 6 months |
| Cloudflare Turnstile | Checks that sign-up, sign-in and contact forms are used by a person, not a bot. Runs in a frame from challenges.cloudflare.com | Session |
| Stripe Checkout | When you pay, Stripe’s checkout page (on stripe.com) uses its own cookies for fraud prevention | Set by Stripe |
Optional: anonymous analytics
If you opt in, your browser sends the address of each page you view to our own server, which adds it to a daily count. No cookie or identifier is stored, nothing is shared with third parties, and counts cannot be linked to you.