Cookie Policy

1. About this Cookie Policy

This Cookie Policy explains how Mostly Tiny Ltd uses cookies and similar technologies (together, "cookies") on mostlypdf.com, what they do, and the choices you have. It should be read together with our Privacy Policy. Effective date: 2026-09-22.

2. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies — such as pixels, SDKs, local storage and device identifiers — work in comparable ways. They let a site function, remember your choices, and understand and improve how it is used.

3. Categories of cookies we use

Strictly necessary — required for mostlypdf.com to work (for example security, load-balancing and remembering your consent choices). These do not require consent and cannot be switched off.

Preferences — remember your settings and choices, such as language or region.

Analytics / statistics — help us understand how mostlypdf.com is used so we can improve it.

Marketing / advertising — used to deliver and measure advertising, including across different sites ("cross-context behavioural advertising").

4. Consent for non-essential cookies

Where the law requires consent, we do not place non-essential cookies (preferences, analytics and marketing) until you accept them through our consent banner. We give you clear information about what they do before they are set, and make accepting and rejecting equally easy.

Your consent is freely given, specific, informed and given by a clear affirmative action — simply continuing to browse is not consent. You can change or withdraw your choice at any time using the banner or the "Cookie settings" link on mostlypdf.com, and withdrawing is as easy as giving consent.

5. Cookies that do not need consent

Strictly necessary cookies are exempt from the consent requirement because they are essential to provide the service you have asked for. All other cookies are placed only after you consent.

6. The cookies and browser storage we use

Strictly necessary (no consent needed):

mostlycookie_consent — cookie, first-party, 180 days: remembers your cookie choices.

Firebase Authentication (browser database "firebaseLocalStorageDb") — only if you sign in, until you sign out: keeps you signed in.

forge_locale — cookie, first-party, 1 year: remembers which language to show you. UK law permits this without consent as it adapts the site to your preferences.

mpdf (browser database) and mp_pending_checkout, mp_paywall_tool (browser session storage) — until the task or tab ends: resume the tool run you started, e.g. after signing in or paying.

mp.theme — browser storage, until cleared: your light/dark theme choice.

mt_ref — browser storage, until you sign up: a referral code from a friend's link, used only to credit that referral.

Analytics (only with your consent, except Fathom — see below):

Fathom Analytics — no cookies and nothing stored on your device; runs without consent in the UK and stops if you switch off Analytics.

PostHog — browser storage (keys beginning "ph_"), until cleared: product analytics, including click heatmaps and session recordings with everything you type masked. Set only with Analytics consent.

mt_first_touch, mt_last_touch — browser storage, until cleared or you refuse both Analytics and Marketing: how you first and most recently arrived. Set only with Analytics or Marketing consent.

Marketing (only with your consent):

mt_click_ids — browser storage, first-party, 90 days: the advert click identifier described in our Privacy Policy.

Google Ads: _gcl_au, _gcl_aw, _gcl_gb — cookies set by Google, up to 90 days.

Microsoft Advertising: _uetsid (1 day), _uetvid (up to 13 months), _uetmsclkid (90 days) — cookies set by Microsoft.

ChatGPT Ads: __oppref, __obref — cookies set by OpenAI's measurement pixel, for the period OpenAI sets.

All of these are set only with Marketing consent, and only on pages where we run that platform's tag.

Cloudflare Turnstile, which checks you are not a bot on some forms, may set a short-lived security cookie. Paying for a subscription happens on Stripe's checkout page, which sets its own cookies under Stripe's privacy policy.

7. Cookie-free statistics and your right to object

Fathom Analytics counts visits without cookies and without identifying you. In the UK this is permitted without consent for statistical purposes, provided you can object: switch off "Analytics" in Cookie settings and Fathom stops counting your visits.

8. How long cookies last

Cookies are either "session" cookies, deleted when you close your browser, or "persistent" cookies, which stay for a set period or until you delete them. The duration of each cookie we use is shown in our cookie list.

9. Managing cookies in your browser

You can also block or delete cookies through your browser settings, and set your browser to warn you before accepting them. If you block strictly necessary cookies, parts of mostlypdf.com may not work.

10. If you are in the United States

We do not sell personal information. Marketing cookies used to measure our adverts can count as "sharing" under some US state privacy laws; they are set only if you accept them, and we treat a Global Privacy Control signal from your browser as a refusal.

11. Changes to this Cookie Policy

We may update this Cookie Policy as our cookies or the law change. We will post the updated version here with a new effective date.

12. Contact us

Questions about this Cookie Policy? Contact Mostly Tiny Ltd at hello@mostlytiny.io.