Cookies
Draft — to be reviewed by the client’s legal counsel
Last updated 1 October 2026
This working version describes how the website and the project workspace currently handle information. The final wording is to be supplied by the client’s counsel, together with the company’s legal name and address.
Strictly necessary cookies
These keep the site secure, keep you signed in and remember your cookie choice. They do not track you across other websites and cannot be switched off.
| Name | Purpose | Lasts |
|---|---|---|
| cmf_d | A random device identifier, used for security — for example to limit repeated sign-in attempts | 1 year |
| cmf_c (__Host-cmf_c on the live site) | Keeps you signed in to your project workspace after you verify your email | 30 days, renewed while you use the site |
| cmf_v | Ties a sign-in link to the browser that asked for it | 30 minutes |
| cmf_vl | Holds a sign-in link opened in another browser while you confirm it | 10 minutes |
| cmf_consent | Remembers your choice about optional cookies | 6 months |
| cmf_session (__Host-cmf_session on the live site) | Staff sign-in to the administration area only | Session |
Optional analytics
If the studio enables Google Tag Manager or Google Analytics, they load only after you allow analytics below, and they set their own cookies (such as _ga and _gid) to count visits and see which pages are useful. Turning analytics off removes those cookies. At the time of writing no third-party analytics are enabled.
Separately, the website counts page views and searches itself, without cookies and without storing your IP address.
Storage in your browser
My Project — the pieces you save before signing in — is kept in your browser’s local storage until you save it to a workspace or clear it, as are an enquiry you have started, the samples you have chosen, your contact details for the next form and a few display preferences. A temporary, per-tab identifier is used to count page views anonymously.