The cookies Mill & Merchant uses, why, and how to manage them. Plain-English, no dark patterns.
Last updated: August 2026
Cookies are small pieces of text stored by your browser when you visit a site. Some are essential (signing you in, remembering preferences). Others are optional and only set if you agree.
Nothing non-essential fires until you've made a choice. You can change your mind any time using .
| Cookie | Category | Purpose | Retention | Provider |
|---|---|---|---|---|
| authjs.session-token / __Secure-authjs.session-token | Essential | Keeps you signed in after a magic-link, including marketplace sellers. | Session / up to 30 days | Mill & Merchant (Auth.js) |
| authjs.csrf-token / __Host-authjs.csrf-token | Essential | Prevents cross-site request forgery on sign-in forms. | Session | Mill & Merchant (Auth.js) |
| authjs.callback-url | Essential | Remembers where to return you after signing in. | Session | Mill & Merchant (Auth.js) |
| mm_cookie_consent | Essential | Stores your cookie preferences. | 1 year | Mill & Merchant |
| vercel* / Vercel Analytics & Speed Insights | Analytics | Aggregate traffic and performance. No ad tracking. | Up to 1 year | Vercel Inc. |
| Stripe (checkout only) | Essential when you pay | If you pay a listing or membership fee, Stripe may set cookies on its checkout to process the card. Not used for timber sales. | Per Stripe | Stripe |
Marketing cookies are reserved for later and are not active today.
Open at any time. Your choice is stored in mm_cookie_consent for one year. Clearing site data resets it. Blocking essential cookies may sign you out.
Use . Withdrawal doesn't undo what already happened while consent was in place.
hello@millandmerchant.co.uk. The privacy policy covers the wider picture.
Not legal advice — if you need a bespoke policy for your own business, speak to a solicitor.