COOKIE POLICY

Cookies on MCP Toplist

Short version: we use one first-party cookie to remember your cookie choices, a session cookie only if you sign in, and Google Analytics if you accept it. No advertising, no cross-site tracking.

Manage your choices

Open the cookie preferences panel any time to change which cookies are set. Choices are kept for 12 months and apply to this browser on this site.

Cookies we set

Name	Category	Purpose	Duration	Provider
mcp_consent	Strictly necessary	Remembers your cookie choices so the banner does not re-prompt.	12 months	MCP Toplist (first-party)
__Host-mcp_session	Strictly necessary	Keeps you signed in after you sign in with Google or GitHub. Only set when you sign in; deleted when you sign out.	30 days (renewed while you keep using the site)	MCP Toplist (first-party)
__Host-mcp_oauth	Strictly necessary	Protects the sign-in handshake against forgery (anti-CSRF state and PKCE verifier). Removed as soon as sign-in completes.	10 minutes	MCP Toplist (first-party)
_ga	Analytics	Distinguishes unique visitors. Only set after you accept analytics.	2 years	Google Analytics
_ga_<container-id>	Analytics	Persists session state for Google Analytics 4.	2 years	Google Analytics

By region

EU, EEA, UK, Switzerland — GDPR / UK GDPR
Analytics is off until you accept. The banner shows Accept all and Reject all as equally prominent options.
Brazil — LGPD
Same opt-in model as GDPR. Banner copy is presented in Portuguese.
California — CPRA / CCPA
Analytics is on by default. Turning off the analytics toggle is treated as your do not sell or share my personal information signal. We do not knowingly sell personal information.
Everywhere else
Analytics is on by default with a clear opt-out. You can change this from .

Do Not Track and GPC

We honour the Global Privacy Control signal where your browser sends it: it is treated as a request to opt out of analytics.

Questions

Email hello@biff.ai with any data-protection request, including access, deletion, or correction.