Effective date: August 27, 2026 Last updated: August 27, 2026
This Cookie Policy explains what cookies and similar client-side storage MAFICA (operated by Yu Plus Co., Ltd., "we," "us," "our") actually uses. We keep this list short and literal: it names every cookie our own application sets, and states plainly that we do not use third-party advertising or analytics trackers.
Cookies are small pieces of data a website stores in your browser. This Policy also covers localStorage, a similar browser storage mechanism we use for a few settings that don't need to be sent to our server on every request. We distinguish between the two below.
| Name | Type | Purpose | Duration | Can you refuse it? |
|---|---|---|---|---|
mafica_session | Strictly necessary, httpOnly | Holds your authenticated session token so you stay logged in. Never readable by client-side JavaScript. | Until logout or expiry | No — required for any authenticated feature. Refusing/blocking it means you cannot stay logged in. |
mafica-locale | Functional, not httpOnly | Remembers your selected display language (one of MAFICA's 11 supported languages) so the interface renders in that language on your next visit, without needing to guess from your browser settings every time. | Persistent, until changed or cleared | Yes — clearing it simply resets the interface to detecting a language from your browser's Accept-Language header. |
| OAuth state cookie (short-lived, provider-specific name) | Strictly necessary, httpOnly | Set only during the moment you connect a third-party integration (e.g., Shopify, Instagram, Threads) via OAuth; holds a random state value we compare against the provider's callback to prevent cross-site request forgery. | A few minutes, deleted after the OAuth flow completes | No — required for the specific integration-connection flow you initiated; it does not persist or track you afterward. |
We do not set any advertising cookies, third-party analytics cookies, or cross-site tracking cookies. MAFICA does not use Google Analytics, Meta/Facebook Pixel, or similar tools.
localStorage (Not a Cookie, But Similar)The following preferences are stored only in your browser's localStorage, are never transmitted to our servers, and are scoped to the device/browser you set them on:
Because these never leave your browser, clearing your browser's site data for MAFICA resets them, and we have no way to see or restore them for you.
Most browsers let you view, delete, and block cookies through their settings. Because mafica_session is required for you to remain logged in, blocking it will functionally log you out. Because mafica-locale only affects which language the interface displays, blocking it is safe and simply falls back to browser-language detection.
If we add a new cookie or client-side storage mechanism in the future — for example, if we later integrate a third-party analytics tool — we will update this Policy first and describe it here with the same specificity as the table above, rather than adding it silently.
Questions about this Cookie Policy can be sent to: support@mafica.jp