The short version

Minteller sets three cookies to sign you in and keep you signed in, and one short-lived cookie during a social sign-in. All of them are strictly necessary. We set no analytics, advertising or tracking cookies of any kind.

Because every cookie we set is strictly necessary, the Privacy and Electronic Communications Regulations do not require us to ask your consent for them, which is why you are not greeted by a banner. If that ever changes — if we add analytics, for example — we will ask first, and we will not set anything non-essential until you say yes.

The cookies we set

mnt_at — your access token. Sent with requests to our API so we know the request is yours. Short-lived. HttpOnly, so scripts cannot read it, and Secure, so it is never sent over an unencrypted connection.

mnt_rt — your refresh token, used to get a new access token without making you sign in again. This is the one credential worth stealing, so it is restricted to the sign-in endpoints by path and travels with as few requests as possible. HttpOnly and Secure.

mnt_session — a marker holding no secret at all, which tells the website whether to draw the app or send you to the sign-in page. It exists because the other two cookies are deliberately not visible to ordinary page requests.

Minteller.External — set only while you are signing in with Google or LinkedIn, to carry the sign-in across the round trip to their site. It lasts ten minutes and is then discarded.

The three session cookies are deleted when you sign out.

Things we keep in your browser

Apart from cookies, the app remembers a few preferences in your browser's own storage. None of these leave your device and none identify you to anyone else. Which theme you chose. Whether the side menu is folded. Which camera, microphone and speaker you last used on a call, whether background blur was on, how the video fits its tile, and which corner the call window sat in. A half-finished profile setup, so you can come back to it. A pilot code you typed, until your account exists. A feedback message you were writing, until you send it. Whether we have already asked you how a conversation turned out. You can clear all of this by clearing your browser's site data for minteller.com.

Cookies we do not set

We do not set analytics, advertising, personalisation or social media cookies, and we do not embed third-party trackers.

Third parties your browser may contact

Some parts of the service load resources from other companies, which may set their own cookies under their own policies:

Stripe — when you go through checkout or open the billing portal. These are Stripe's pages, and Stripe uses cookies for fraud prevention.

Twilio — during a video call, to carry the audio and video.

logo.dev — to show a company's logo on an organisation page. Your browser fetches the image directly.

Google and LinkedIn — only if you choose to sign in with them, where we have switched that on.

Microsoft — only if you connect an Outlook calendar.

Managing cookies

Your browser can block or delete cookies. Blocking ours will stop you being able to sign in, because they are what a signed-in session is made of.