Cookies and storage
Not just cookies: local storage, embedded services, outgoing requests and anything sent onward from our server. One list, and it is the same list the privacy-choices panel shows.
This is a draft, and it has not been reviewed by a lawyer. It describes the offer Margo intends to sell, not every detail of what the product does today — parts of it name commitments that are still being built. It has no legal approval behind it, and Margo is not on sale. It will be finished, checked and versioned before anyone can buy anything. Until then, please read it as a statement of intent.
Why there is no banner
There is no cookie banner here, and that is deliberate. Every technology on this site is strictly necessary — it remembers your privacy choices, your light or dark preference, and protects the forms; payment loads only when you start one. None of it profiles you or follows you anywhere. Asking for permission we do not need would train you to click Accept without reading, which helps nobody. So we disclose instead, in full, below.
Categories
Strictly necessary
What the site cannot work without: your privacy choices, your appearance choice, form protection, and payment when you start one. These cannot be switched off, and none of them profile you.
Functional
Conveniences beyond the essentials. Nothing is in this category today.
Analytics
Measuring how the site is used. We have chosen not to run any analytics, first or third party.
Advertising and marketing
Advertising pixels, conversion forwarding and behavioural profiling. None of this runs here, and there is no sale or sharing of personal information and no targeted advertising.
The full list
| Name | Type | Provider | Purpose | Data | Kept for | Category |
|---|---|---|---|---|---|---|
| margo_privacy | Cookie | Margo (us) | Remembers your privacy choices and the version of the notice they were made against, so we do not ask again on every visit. | Your category selections, the policy version, and a timestamp. No identifier is created for you, and nothing in it identifies you across sites. | 6 months, or until you clear it from the privacy-choices panel. | Strictly necessary |
| margo-theme | Browser storage | Margo (us) | Remembers whether you chose the light or dark appearance. | The string “light” or “dark”. Nothing else. | Until you clear your browser storage. It never reaches our server. | Strictly necessary |
| margo_form | Cookie | Margo (us) | A one-time value for your visit. It lets us tell the difference between a form you submitted yourself and one another website submitted in your name. | A random value. It carries nothing about you. | Cleared when you close the browser. | Strictly necessary |
| Cloudflare Turnstile | Third-party code | Cloudflare, Inc. | Protects the beta application form, Margo Account sign-up and the password-reset request from automated abuse, when it is switched on. | The result of the check, and basic details of the request, sent to Cloudflare to be verified. Margo does not keep the result. | The token is discarded after verification; Cloudflare service retention applies to its own processing. | Strictly necessary |
| margo_lang | Cookie | Margo (us) | Remembers which language you chose, so a neutral URL answers in it and you are not asked again on every visit. | The two letters “en” or “de”. No identifier is created for you. | 6 months, or until you choose the other language. | Strictly necessary |
| Cloudflare Workers — request handling and logs | Outgoing request | Cloudflare, Inc. | Serving the site. Every page is rendered on demand by a Cloudflare Worker, so every request reaches Cloudflare. Logs are also how an outage or an attack is diagnosed at all. | IP address, request time, URL, user agent, response status, and the country Cloudflare derives from the connection. This is personal data even though we never use it to recognise you. | Cloudflare keeps its own logs under its terms. We have request tracing switched on for our account, and a sample of those traces is kept there. We keep them for a few days, Cloudflare’s short default. | Strictly necessary |
| Cloudflare Workers Rate Limiting | Outgoing request | Cloudflare, Inc. | Limiting how often the same visitor can submit a form or start a checkout. It counts requests at each Cloudflare location separately, so it is not one worldwide limit. | A short-lived counter keyed on your IP address. It is not stored by us and is not readable from our code. | Counters expire within the limiter window — 60 seconds. | Strictly necessary |
| help@margo.global | Outgoing request | Google Workspace (Google LLC) | Answering support questions, privacy requests and security reports. One shared mailbox. | Your address and whatever you choose to put in the message. We ask you not to send credentials, databases or other people’s information. | 12 months after the conversation ends; privacy requests and our answers, 3 years. | Strictly necessary |
| margo_session | Cookie | Margo (us) | Keeps you signed in to your Margo account on this website. Only set when you sign in; never readable by page script. | A random sign-in token issued by Margo. It is not linked to anything outside your Margo account. | Up to 30 days, or until you sign out, sign out everywhere, or change your password. | Strictly necessary |
| margo_device | Cookie | Margo (us) | Lets your account’s device list show this browser once, so you can sign it out from any device. Only set when you sign in. | A random identifier for this browser. It carries nothing about you and is not used across sites. | About 13 months, or until you clear your cookies. | Strictly necessary |
| margo_oauth, margo_pending | Cookie | Margo (us) | Carries one “Continue with Google / Apple” attempt across the hop to Google or Apple and back, and — for someone new — the sign-in they returned, until the account is created. | Random values that tie the attempt to this browser, and the sign-in Google or Apple returned. No password. | margo_oauth: 10 minutes at most. margo_pending: 30 minutes at most, while you finish creating the account. | Strictly necessary |
| margo_mac_pair | Cookie | Margo (us) | Remembers which Margo for Mac is waiting to be connected, from the moment it opens this website until you click Connect. Only set when Margo for Mac opens the connect page. | A random pairing value created by Margo on your Mac. Nothing about you. | 14 days at most; removed as soon as the Mac is connected. | Strictly necessary |
| Margo account service | Outgoing request | Margo (us) | Signing in, creating an account and managing it. This website forwards what you submit to Margo’s account service and shows you the answer. | Your email, password (sent once, never stored by this website), name, age, and — if you arrived through one — a referral code. | Held by the account service for as long as your account exists. | Strictly necessary |
| Sign in with Google | Outgoing request | Signing in with your Google account instead of a password. Only when you choose “Continue with Google”. | Google tells Margo your name and email address. Margo never asks for Gmail or Calendar here. | Google’s own terms apply to its processing. | Strictly necessary | |
| Sign in with Apple | Outgoing request | Apple | Signing in with your Apple Account instead of a password. Only when you choose “Continue with Apple”. | Apple tells Margo your name and an email address, which may be a private relay address. | Apple’s own terms apply to its processing. | Strictly necessary |
| Stripe Checkout and Customer Portal | Embedded service | Stripe | Taking a subscription payment and letting you manage or cancel it. Loaded only when you start a purchase — never on an ordinary page. | Your payment details go to Stripe directly; they never reach our server. We receive the outcome, your email address and a customer identifier. | Held by Stripe under Stripe’s terms; our copy of the subscription record lasts as long as the subscription plus the period we are required to keep billing records. | Strictly necessary |
What we do not run
- No Google Analytics, or any other third-party analytics.
- No advertising or conversion pixels, and no server-side conversion forwarding either.
- No session recording or heatmaps.
- No social media buttons or embeds.
- No live-chat widget.
- No tag manager.
- No third-party fonts. Nothing is fetched from a font CDN, so no font service learns that you visited.
If any of that changes, it will be blocked until you have said yes to it — the script, the network request, the storage, and any event we would otherwise send onward from our own server. There is no such thing here as a “cookieless” ping that quietly happens before consent.
If you say no
Everything keeps working. The pages, the pricing, the forms and the checkout all function exactly the same. Rejecting is one click, in the same place, at the same size as accepting, and browsing on, scrolling, closing a banner or accepting our terms is never treated as agreement.
Global Privacy Control
If your browser sends a GPC signal we treat it as an opt-out of any sale or sharing of personal information and of targeted advertising. We do none of those for anybody, so in practice nothing changes — but the signal is honoured, it is never read as permission, and it does not replace the choices panel.
Changing your mind
The same link is in the footer of every page. Withdrawing stops any further optional processing and clears the optional things we put in your browser. It cannot reach data a third party already holds, and we would rather say that than imply otherwise. The full privacy notice.
Questions about this page: contact us. To exercise a right over your data: data requests.