Legal

Cookie Policy

Last updated August 18, 2026

We use a small number of first-party cookies. The ones that keep you signed in are required for the site to work. Analytics cookies are off until you accept them — decline, or ignore the banner, and none are written. You can change your choice at any time from "Your Privacy Choices" in the footer.

This summary is here to orient you. The numbered sections below are the terms that actually apply.

1. What cookies are

A cookie is a small text file a site stores in your browser so it can remember something between page loads — that you are signed in, for example. Similar technologies such as localStorage work the same way for this purpose, and this Policy covers them too.

This Policy is part of our Privacy Policy, which explains the rest of what we collect and why.

2. Strictly necessary cookies

These make the Service work. They are set without consent because without them you could not sign in or stay signed in, and there is no way to provide the Service you asked for without them. They are all first-party.

  • sb-…-auth-token — your authentication session, set by our authentication provider. Keeps you signed in and is refreshed as you browse. Cleared when you sign out.
  • __permissions — a signed, short-lived cache of your platform and vendor permissions, so we do not have to re-query the database on every request. Expires after 1 hour and is re-issued as needed. Signed with a server secret so it cannot be tampered with.
  • mb_consent — records whether you accepted or declined analytics cookies, so we do not ask again on every visit. Lasts 1 year. Setting it is what lets us honor your "no".

Blocking these will sign you out and break sign-in, preorders, and the vendor dashboard.

3. Analytics cookies — off by default

No analytics cookie is written and no analytics event is sent until you click Accept. Our analytics provider (PostHog) is initialized with capture disabled and in-memory-only storage. Until you consent it stores nothing on your device. If you decline — or simply never answer the banner — it stays that way.

  • ph_…_posthog — set by PostHog only after you accept. Holds an anonymous identifier and session details so we can see which pages are used and where people get stuck. Lasts up to 1 year.

We have deliberately turned off PostHog's session recording and its automatic event capture, so we do not record your screen, your mouse movements, or your keystrokes. We use analytics to count and improve, not to watch.

We also use server-side feature flags to control which parts of the Service are switched on. These are evaluated on our server and set no cookie in your browser.

4. What we do not use

  • No third-party advertising cookies, ad networks, or retargeting pixels.
  • No social-media tracking pixels.
  • No cross-site tracking, and no sharing of your browsing activity with data brokers.
  • No session recording or keystroke logging.
  • No fingerprinting to work around your cookie choice.

As stated in the Privacy Policy, Market Bee does not sell or share personal information as those terms are defined by California and other state privacy laws.

5. Third-party services that may set cookies

Map tiles and address autofill are provided by Mapbox and load on pages with a map or an address field. Mapbox receives the map area you are viewing or the address text you type, and may set its own storage to cache tiles. See Mapbox's privacy policy for details.

Links to vendor websites and social media take you to sites we do not control, each with its own cookies and policies.

6. Your choices

Changing your mind

Use the "Your Privacy Choices" link in the footer of every page to reopen the banner and accept or decline. If you withdraw consent, we stop capturing immediately. Clearing the ph_…_posthog cookie in your browser removes what is already stored on your device.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as a decision to decline analytics: we do not show the banner and we do not capture anything, unless you later make an explicit choice yourself. Because we do not sell or share personal information, there is nothing further for a GPC signal to opt you out of.

Browser controls

Every major browser lets you block or delete cookies from its settings, and offers a private-browsing mode that discards them when you close the window. Blocking all cookies will break sign-in here, as it does on most sites.

7. Changes to this policy

If we add a cookie or change what an existing one does, we will update this page and the "Last updated" date. If we ever introduce a category that needs consent beyond what you have already given, we will ask again before setting it.

8. Contact us

Questions about cookies: privacy@themarketbee.com, or our contact page.

Market Bee LLC