Mosaic Studio respects your privacy. We never load non-essential analytics, third-party marketing tags, or session recorders until you explicitly grant consent through our privacy banner.
What Are Cookies & Local Storage?
Cookies are small text files placed on your computer, smartphone, or tablet when you visit a website. Local storage and session storage are modern browser-based storage mechanisms that allow web applications to store key-value data securely on your device.
Mosaic Studio uses these technologies to ensure core website functionality, preserve your active authentication sessions within the Client Portal (`app.mmso.co.za`), store your consent preferences, and measure aggregated website performance.
Categorized Inventory of Technologies We Use
Below is a complete, itemized breakdown of the cookies, storage keys, and third-party tools utilized across our platform:
1. Strictly Necessary & Functional Technologies (Always Active)
These cookies and local storage tokens are vital for the operation of the website, security enforcement, and authenticated portal access. They cannot be disabled.
| Token / Cookie Key | Domain & Provider | Purpose | Duration |
|---|---|---|---|
mosaic_cookie_consent | .mmso.co.za (Mosaic Studio) | Stores your cookie consent selection (‘all’ vs ‘essential’). | 1 Year |
sb-*-auth-token | app.mmso.co.za (Supabase Auth) | Maintains encrypted session state for authenticated Client Portal and Studio users. | Session / 30 Days |
__Host-next-auth.csrf-token | .mmso.co.za (Next.js) | Prevents Cross-Site Request Forgery (CSRF) on project brief and contact submissions. | Session |
pf_session_id | payfast.co.za (PayFast) | Required during invoice checkout to verify secure payment handshakes. | Session |
2. Performance & Core Web Vitals (Consent-Gated)
These tools measure server response times, layout shifts (CLS), largest contentful paint (LCP), and interaction responsiveness without collecting identifying personal profiles.
| Provider & Script | Purpose | Data Transferred | Retention |
|---|---|---|---|
| Vercel Speed Insights | Measures real-user Core Web Vitals and edge network performance. | Anonymized load times, device category, country. | Aggregated (30 Days) |
| Vercel Analytics | Monitors page transition latencies and error boundaries. | Aggregated visitor counts, referrers, route paths. | Aggregated (14 Months) |
3. Analytics & Usability Research (Consent-Gated)
These tools help us understand which case studies and guides are most helpful to prospective clients. They are strictly loaded only if you choose “Accept All” in our consent banner.
| Cookie / Script | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Calculates aggregated visitor sessions and traffic sources with IP anonymization. | 2 Years |
_clck, _clsk | Microsoft Clarity | Aggregated interaction heatmaps and scroll depth analysis with automated PII masking. | 1 Year |
Managing Your Cookie Preferences
You have full control over your cookie preferences at all times. If you previously accepted optional analytics and wish to revoke consent, you can:
- Clear Site Cookies in Browser: Clear the cookies and site data for
mmso.co.zain your browser settings. When you refresh the page, the consent banner will reappear, allowing you to choose “Essential Only”. - Browser Privacy Settings:Most modern browsers allow you to block third-party cookies or configure “Do Not Track” / “Global Privacy Control” headers.
Browser-Specific Cookie Management Guides
To adjust cookie settings across popular web browsers, consult the respective official guides:
Google Chrome
Settings > Privacy and security > Third-party cookies
Apple Safari
Preferences > Privacy > Prevent cross-site tracking
Mozilla Firefox
Settings > Privacy & Security > Enhanced Tracking Protection
Microsoft Edge
Settings > Cookies and site permissions > Manage and delete cookies
Questions & Contact
If you have questions regarding our cookie practices or our processing of telemetry data under POPIA, please reach out to our privacy desk at privacy@mmso.co.za.