Cookie Notice

Cookies are small values stored by a browser. Similar technologies can hold a short-lived security value in browser storage. They help us keep an authenticated session, prevent abuse and deliver the service.

• mh_session: an essential, HTTP-only session cookie used to keep you signed in. It is not available to page scripts, uses SameSite=Lax, is Secure in production and expires with the server session, no later than 30 days after sign-in.
• Cloudflare Turnstile: a human-check on abuse-prone public forms. Cloudflare receives technical request information and may use strictly necessary browser storage to provide the security check.
• Hosting security: Microsoft Azure or network infrastructure may use short-lived, strictly necessary routing or security values to deliver and protect the application.
• Optional analytics consent: Marra Hub remembers your Allow or Decline choice in browser storage so it does not ask again. Only if you allow analytics does it also store allow-listed first-touch campaign values (the utm_* values from the link you arrived on) and load Google Analytics. Once allowed, Google Analytics records the pages you view and a small set of completed actions, such as finishing a sign-up or submitting an application. Pages are recorded as their generic route (for example /reset/:token), never the exact address, so one-time links and codes are not sent. No analytics script is loaded before you allow it, and none is loaded if you decline.

Essential technologies are required for sign-in and security. Optional analytics is controlled by the banner on public pages: choose Decline to keep it off or Allow analytics to enable it. You can clear the consent and campaign values through your browser's site-data controls. Signing out revokes the current Marra Hub session and clears its cookie.

Google Analytics and Google Ads conversion measurement may be enabled only after optional consent, as described in the Privacy Policy. The measurement counts page views and conversion events in aggregate — it does not send your name, email address or any other detail you have given us — and ad blockers may prevent it from loading. For the wider handling of personal information, see our Privacy Policy.