Last updated: 10 August 2026
This page lists every cookie Mago Lucas puts on your device. There are two. That is all.
In short
- We use two technical cookies:
ml_sessionandml_visitor. - We use no profiling cookies, no analytics cookies and no advertising cookies.
- We do not use Google Analytics or any other traffic measurement tool.
- No third-party cookies are set by our pages.
- There is no banner to accept, because there is nothing we need your consent for.
This is not an oversight. It is a decision: the visitor tracking present in the old version of the site has been removed.
What cookies are
They are small text files a site saves in your browser to remember something between one page and the next. The HTTP protocol forgets everything with each request: without cookies, the site would not know you had just signed in.
The law distinguishes technical cookies, needed to make the site work, from profiling cookies, used to build a picture of your interests. The first kind does not require your consent; the second does. We only use the first kind.
The cookies we use
ml_session
What it does: keeps you signed in. It holds a random code identifying your login session. Without it you would have to log in again on every page.
When it is set: only when you sign in to your account. If you do not have an account, you will never receive it.
What it contains: only a random code. No personal data, no email, no password.
Lifetime: 12 months from login. It goes sooner if you sign out or change your password.
Technical properties: httpOnly (page scripts cannot read it, which protects it from a whole class of attacks), sameSite=lax (other sites cannot cause it to be sent), secure (it only travels over an encrypted connection).
How to remove it: sign out, or clear cookies in your browser. You will then have to sign in again.
ml_visitor
What it does: stops you being dealt the same card spread over and over. When you generate a reading, the site remembers which layouts it has already given you and picks a different one. The same code also prevents the same visitor liking the same content more than once.
When it is set: on your first visit, even if you have no account.
What it contains: a random identifier (a UUID) generated on the spot. It is not derived from any information about you and is not linked to your name, your email or your IP address. We have no way of knowing who you are from this code.
Lifetime: 12 months.
Technical properties: httpOnly, sameSite=lax, secure.
What it does NOT do: it does not reconstruct your browsing, does not record the pages you visit, does not feed any statistics, is shared with nobody and never leaves our servers.
How to remove it: clear cookies in your browser. On your next visit you will get a new one and the site may offer you a spread you have seen before. Nothing else changes.
Third-party cookies
Our pages set no third-party cookies.
When you start a purchase we take you to Stripe, which handles the payment. From that point you are on their domain and their cookies and their privacy notice apply. As soon as the payment is complete you come back to us. Stripe uses its own cookies for transaction security and fraud prevention: see its policies at stripe.com.
Other technologies
We use no tracking pixels, web beacons, browser fingerprinting or advertising identifiers.
Your browser may store some display preferences locally: that is browser storage, not cookies, and that data is never sent to our servers.
Managing cookies in your browser
You can block or delete cookies in your browser settings. Every browser has its own procedure, usually under "Privacy and security".
If you block our cookies, the site remains readable — you can browse public readings and information pages — but you will not be able to sign in, because without ml_session the site cannot recognise you after login.
Cookies and personal data
The cookies described here contain no personal data in readable form. The session code, however, can be traced back to your account: for that reason its processing is also described in our Privacy notice, together with the retention period and your rights.
Changes
If we ever added a cookie, this page would be updated before that happened and, if the cookie were not a technical one, we would ask for your consent with a banner. As long as you are reading a list of two entries, there is nothing else.
Contact
Any questions: [EMAIL PRIVACY].
Controller: [RAGIONE SOCIALE], [INDIRIZZO], VAT [P.IVA].
See also: Privacy notice · Terms of use · AI transparency