Cookie Policy
Last updated: 2026-10-14
How MirrorUploadX uses cookies and similar technologies. The short version: we set a sign-in cookie, plus a short-lived one only while you connect an external account; both are strictly necessary, and there is nothing here to consent to.
1. The cookies we set
A session cookie keeps you signed in. It is HttpOnly, so page scripts cannot read it, and it exists only to hold your sign-in session and protect it against cross-site request forgery. The service cannot function without it, so it is strictly necessary and does not require consent.
A connection cookie is set only while you connect an external account (for example a file host) through that service’s own sign-in page. It ties the returning sign-in to the browser that started it, expires after 10 minutes, and is used for nothing else. It is also strictly necessary: without it the connection cannot be completed safely.
2. What we do not use
We do not use analytics cookies, advertising cookies, cross-site tracking, fingerprinting, or third-party scripts of any kind.
The host logos in our provider lists come from third-party icon services, but your browser never talks to them: our own server fetches each logo, caches it, and serves it from our domain. So no third party sees your IP address or which page you are on. This used to work the other way round — your browser fetched the logos directly — and this paragraph still described that older behaviour until we corrected it. Our fonts have always been served from our own domain.
One exception: when the sponsored banner on share pages is switched on, its image is loaded by your browser directly from the advertiser’s address. That server therefore sees your IP address and browser, as with any image request, and we do not control what it logs or whether it sets cookies of its own. No script is loaded with the banner, and share pages show no banner while it is switched off.
Because we set no non-essential cookies, there is nothing to consent to — which is why you will not see a cookie banner here. If that ever changes, we will ask before setting anything.
3. Similar technologies
Your access token is held in memory for the duration of the page, not in local storage — closing the tab discards it. We do not use local storage or session storage to profile you.
4. Managing cookies
You can clear or block cookies in your browser settings. Blocking the session cookie will sign you out and break sign-in, and blocking the connection cookie stops external accounts from being connected; nothing else on the site depends on cookies.