Last updated 13 October 2026
This page lists every cookie and every piece of browser storage (local storage and session storage) that minxa.com uses, who sets it, how long it lasts and why. Minxa uses no advertising cookies and does not track you across other websites.
The only thing on minxa that needs your consent is analytics (PostHog). How it starts depends on the country of your connection, as Cloudflare reports it:
You can change your mind at any time with Cookie settings at the bottom of every page: . Switching analytics off deletes PostHog's cookie and stored ids from your browser. We keep a record of each choice (a random receipt number, the choice, the banner version, a two-letter country code and the time; no IP address, no account) for 24 months, so we can show that we asked. Without JavaScript nothing that needs consent runs at all.
Sign-in, security against forged forms, and remembering your cookie choice. The site does not work without these, so they cannot be switched off.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
minxa_session |
Cookie | minxa server (Laravel) | 30 days | Keeps your visit and sign-in together from page to page. HttpOnly. | Every page |
XSRF-TOKEN |
Cookie | minxa server (Laravel) | 30 days | Protects forms and buttons against cross-site request forgery. | Every page |
remember_web_* |
Cookie | minxa server (Laravel) | 400 days | Keeps you signed in on this browser until you sign out. | After you sign in |
mx_analytics_consent |
Cookie | minxa page script | 180 days | Stores your analytics choice (1 = on, 0 = off) so the server honours it too. | First page |
mx_consent |
Local storage | minxa page script | Until you clear it | Your consent receipt: its id, the banner version you answered and when. | After a cookie choice |
minxa_signup |
Cookie | minxa server | 30 minutes | Holds a sign-up in progress while you enter an invite code. HttpOnly. | Signing up |
minxa_invite |
Cookie | minxa server | 60 minutes | Carries an invite code through Apple or Google sign-in. HttpOnly. | Following an invite link |
minxa_pending_follow |
Cookie | minxa server | 60 minutes | Remembers the profile you asked to follow while you sign in. HttpOnly. | Follow while signed out |
pending_nav_breadcrumb |
Cookie | minxa page script | 30 seconds | Carries the chat message you just sent to the page it opens. | Chat navigation |
returnAfterLogin |
Session storage | minxa page script | This tab | The page to return to after signing in. | Sign-in from a page |
Remember things you set or did on minxa, such as a collapsed chat panel or which products you have already seen. They stay in your browser, carry no identifier and are never sent to anyone.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
mx_tz |
Cookie | minxa page script | 1 year | Your time zone, so the picks email arrives at 9:00 your time. | Signed in |
chatCollapsed@desktop |
Local storage | minxa page script | Until you clear it | Whether you collapsed the chat panel on a computer. | First page |
chatCollapsed@mobile |
Local storage | minxa page script | Until you clear it | Whether you collapsed the chat panel on a phone. | First page |
minxaQuip |
Local storage | minxa page script | Until you clear it | The tagline shown under the logo, so it does not change on every page. | First page |
minxaQuipTime |
Local storage | minxa page script | Until you clear it | When that tagline was picked. | First page |
last_look__* |
Local storage | minxa page script | Until you clear it | When you last looked at a section, so new arrivals since then can be marked. | Browsing |
last_look_update_check__* |
Local storage | minxa page script | Until you clear it | When that "last looked" time was last moved forward. | Browsing |
revert_sticky_date__* |
Local storage | minxa page script | Until you clear it | Keeps a date filter you picked for a while. | Browsing |
pref_new_and_sale |
Local storage | minxa page script | Until you clear it | Your "new and sale" filter choice. | When you change it |
mx_new_bubble_ll:* |
Local storage | minxa page script | Until you clear it | Which "new since your last visit" note you have already seen. | Browsing |
chat_messages |
Session storage | minxa page script | This tab | The chat conversation, so it survives moving between pages. | Chat |
ll_user_choice_ts |
Session storage | minxa page script | This tab | When you last changed a date filter yourself, so it is not reset under you. | Browsing |
ll_migration_attempted |
Session storage | minxa page script | This tab | One-time tidy-up of older saved settings. | Browsing |
ll_migration_completed |
Session storage | minxa page script | This tab | Marks that tidy-up as done. | Browsing |
mx_search_state_mismatch_sent |
Session storage | minxa page script | This tab | Sends one error report per tab, not one per page. | Rare |
ll_debug_enabled |
Cookie | minxa page script | 24 hours | A developer debug switch (?debug=true). | Never for normal visits |
ll_debug_bucket_* |
Cookie | minxa page script | 1 hour | Debug details for that developer switch. | Never for normal visits |
Set by Cloudflare, which protects minxa from bots and attacks, on pages it decides to check.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
__cf_bm |
Cookie | Cloudflare | 30 minutes | Tells people from bots. | Pages Cloudflare checks |
cf_clearance |
Cookie | Cloudflare | Up to 1 day | Remembers that you passed a Cloudflare check. | After a check |
Set by Stripe only when you open a gift payment, to process it and prevent fraud.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
__stripe_mid |
Cookie | Stripe.js | 1 year | Fraud prevention for card payments. | Only after you open a gift payment |
__stripe_sid |
Cookie | Stripe.js | 30 minutes | Fraud prevention for card payments. | Only after you open a gift payment |
m |
Cookie (another site) | Stripe (m.stripe.com) | 2 years | Fraud prevention for card payments. | Only after you open a gift payment |
Count how minxa is used (pages viewed, clicks out to shops) so we can improve it. Off until you accept outside the United States and Japan; off everywhere when your browser sends a Global Privacy Control signal.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
ph_*_posthog |
Cookie | PostHog script | 1 year | A random visitor id and session id for usage counts (domain .minxa.com). | Only with analytics on |
ph_*_posthog |
Local storage | PostHog script | Until you clear it | PostHog's copy of the same ids. Removed with the cookie when you switch analytics off. | Only with analytics on |
Set by Termly, which shows the cookie banner today. They go away when our own banner replaces it.
| Name | Type | Set by | Lasts | What it is for | When |
|---|---|---|---|---|---|
csrf_token |
Cookie | Termly banner script | 30 days | Termly's own request check. Goes away with Termly. | While Termly shows the banner |
TERMLY_API_CACHE |
Local storage | Termly banner script | Until you clear it | Termly's visitor id and your choice in its banner. Goes away with Termly. | While Termly shows the banner |
These companies receive data when you use minxa. None of them is allowed by us to use it for advertising.
| Service | What for | What it receives | Its policy |
|---|---|---|---|
| Cloudflare | Runs in front of minxa: delivery, protection from attacks and bots, and a cookieless page-speed and visit count (Cloudflare Web Analytics, added by Cloudflare to every page). (static.cloudflareinsights.com, cloudflareinsights.com) | Your IP address, the page address and your browser's request headers, as for any website. | www.cloudflare.com |
| PostHog (only with your consent) | Product analytics: pages viewed and clicks out to shops, counted per random visitor id (and your account number when signed in). No session recording, no automatic click capture. (us.i.posthog.com, us-assets.i.posthog.com) | The page address, your random PostHog id, your account number if you are signed in, and your IP address (used for a rough location). | posthog.com |
| Stripe | Processes gift payments between members. Its script loads only when you open a gift payment. (js.stripe.com, m.stripe.com, api.stripe.com) | Your card details (entered in Stripe's own fields; minxa never sees them) and device data for fraud prevention. | stripe.com |
| Skimlinks (Skim Resources) | Affiliate network. When you click through to a shop, minxa sends you via a Skimlinks link so a purchase can be credited. No Skimlinks script runs on minxa. (go.skimresources.com) | Our click number and the address of the minxa page you clicked from (no query string). Skimlinks and the shop then set their own cookies on their own sites. | skimlinks.com |
| Sovrn Commerce | Affiliate network, used for some shops in the same way as Skimlinks. No Sovrn script runs on minxa. (redirect.viglink.com) | Our click number and the shop link. Sovrn and the shop then set their own cookies on their own sites. | www.sovrn.com |
| Termly | Shows the cookie banner today. Goes away when our own banner replaces it. (app.termly.io, us.consent.api.termly.io) | Your IP address (for its region check), your banner choice and a Termly visitor id. | termly.io |
Minxa does not set any cookie when you click a product. We count the click (a click number, no name, no email), then send you to the shop, often through an affiliate network (Skimlinks or Sovrn Commerce) with that click number and the address of the minxa page you came from. The network and the shop may then set their own cookies on their own websites so that a purchase can be credited to minxa. Those cookies are theirs and follow their policies, linked above. See also our Affiliate disclosure and Your privacy choices.
We update this page before minxa starts using a new cookie, storage key or outside service, and change the date at the top. If the change is something that needs your consent, we ask again.
Questions about cookies or your data: [email protected]. Our Privacy Policy explains the rest of what we collect and why.