Last updated 6 October 2026.

We set two cookies, and neither one until you sign in.

One keeps you signed in. The other remembers what you were doing while you are signed in. There is no advertising cookie, no analytics cookie, and nothing on this site that reports what you do to anybody else. If you read this site without signing in, no cookie is stored on your device — and the only thing stored at all is the Ask conversation, if you have one, which stays in that browser tab.

Neither cookie can be read by any script on the page, and neither is issued without the flag that keeps it off an unencrypted connection — so arriving on an http:// link, before the site moves you to the secure one, does not put your sign-in on the wire. A sign-in token issued before 6 October 2026 gains that the next time you sign in.

What a cookie is here

A cookie is a small file this site asks your browser to keep and send back on your next request. That is the only way a website can recognise that two requests came from the same person: without one, signing in would last exactly one page.

Both of ours are first-party — set by this site, sent only back to this site, and readable by nobody else. We set no third-party cookies, so nothing here can follow you to another website or recognise you arriving from one.

The two cookies
What it isWhat it doesHow long it lasts
Your sign-in token
Set when you sign in
Keeps you signed in as you move between pages, and tells the site which account you are using. It is a signed token: your password is not in it and nothing in it can be read or changed by anything running in your browser.72 hours, or until you sign out.
Signing out deletes it immediately.
Your session
connect.sid
Identifies your session on our server, where we keep what you are in the middle of: which part of the site you were last working in, the page to return you to after you sign in, and — for an administrator supporting you — that a support session is in progress. The cookie itself holds only a random identifier; everything it refers to stays on our server.100 hours, or until you sign out.
Signing out ends the session it points at.

Neither is set before you need it. Reading this site signed out — the market page, the league tables, this policy — stores nothing on your device. The session cookie appears the moment there is something to remember: when you sign in, or when you ask for a page that requires signing in and we record where to send you afterwards. The sign-in token appears when you sign in.

What we do not do
Other things kept on your device

Two kinds, and neither is a cookie — a cookie is sent to our server on every request, and these never leave your browser on their own.

How to refuse or remove them

Your browser controls this, and the controls vary, so your browser's own help is the best guide. Deleting cookies for this site signs you out; refusing them altogether means you cannot sign in at all, because keeping you signed in is what the token is for. Reading the public pages works either way.

Changes, and who to ask

If we add a cookie, it will be listed here before we set it, and the date at the top of this page will change. If you want to know what any of the above means for your firm, or you think this page does not match what your browser is holding, write to admin@us-mtns.com and we will answer it.

This page describes what is stored on your device. What we hold about you more generally, and how long we keep it, is in our privacy policy.

© US-MTNs Incv1098