Cookie Policy

Last updated: October 5, 2026

This Cookie Policy explains how Mustloop, a service operated by Sparkling Opinions, Lda ("Mustloop", "we", "us", or "our"), uses cookies and similar technologies on our website and application (the "Service"). It should be read alongside our Privacy Policy.

What cookies are

Cookies are small text files stored on your device when you visit a website. Similar technologies, such as browser localStorage, can store information in the same way. They are widely used to make websites work, to keep you signed in, and to understand how a service is used.

Our approach

We keep this simple: we use only strictly necessary cookies. We do not use advertising cookies, and we do not use cross-site tracking cookies. Because we limit ourselves to cookies that are essential to provide the Service you have asked for, we do not show a cookie consent banner. Strictly necessary cookies are exempt from prior consent under EU and UK cookie rules.

Cookies we use

Strictly necessary cookies

These are required for the Service to function and cannot be switched off in our systems:

  • Session cookie: keeps you signed in to your account while you use the app.
  • CSRF token cookie (e.g. XSRF-TOKEN): protects against cross-site request forgery so that form submissions and requests come from you.

Analytics and error monitoring (no cookies)

To understand usage and to detect and fix problems, we use PostHog for analytics and error tracking. We have deliberately configured it so it does not store cookies or other identifiers on your device:

  • PostHog runs in a cookieless configuration: its state is held only in memory for the current page session and is not written to cookies, localStorage or sessionStorage. It records the pages you visit, the referring site and campaign tags, time on page, browser and device type, and approximate location from your IP address. Because nothing is stored on your device, a later visit is not linked to an earlier one until you sign in.
  • Error reports contain the error message and where in our code it happened, with email addresses removed. We do not use session replay, which would record your session.

Local storage

The app also keeps a few strictly necessary values in your browser's storage. None of them are used for tracking:

  • tenantId (localStorage and sessionStorage): the workspace you last worked in, and the one each open tab is in, sent with your requests so the app loads the right one. The tab's copy is cleared when you close the tab.
  • mustloop-theme and language (localStorage): your display preferences.
  • mustloop.install-dismissed (localStorage): when you last dismissed the suggestion to install Mustloop as an app, so it stays hidden for 30 days.
  • mustloop.invite, mustloop.intent, mustloop.oauth-state, mustloop.return-to and gmail_reconnect_return (sessionStorage): your invitation and what you were doing before a Google sign-in or reconnect, so you return to the right place. Cleared when you close the tab.

Managing cookies

Because we only use strictly necessary cookies, blocking them may prevent you from signing in or using core parts of the Service. You can control or delete cookies through your browser settings at any time. See your browser's help pages for instructions.

Changes to this policy

If we introduce any non-essential cookies in the future, we will update this policy and, where required, ask for your consent before setting them. When we make material changes, we will update the "Last updated" date above.

Contact us

If you have questions about our use of cookies, contact us at privacy@mustloop.com.