Effective and last updated: September 8, 2026
This notice explains the limited cookies and local browser storage used by Mello Zone Furry Community and the request-to-load boundary for third-party media.
Privacy-protective default
Public pages do not load a third-party consent manager, client-side audience analytics, advertising services, cross-site personalization, or automatic third-party embeds. There is no cookie banner because there is no optional tracking choice to obtain on ordinary page visits.
When a browser sends Global Privacy Control, Mello Zone Furry Community honors the signal and prevents a remembered external-media provider from loading automatically.
Essential storage
When a request contains an exact Sec-GPC: 1 header, the site edge may set the first-party mz_privacy_mode cookie for up to 180 days so browser-side controls can reflect that signal. The edge removes the cookie when a later request no longer carries the active signal.
If a visitor selects Remember this provider before loading an external embed, local browser storage records only that provider choice under an mz_embed_ key. The Privacy Center can remove those remembered choices.
Repository and deployment providers may use secure authentication state for authorized editors. Cloudflare and Turnstile may use narrowly required security state when an eligible form or protected action is requested.
Services not used on public pages
The public site does not load iubenda, Google Analytics, Microsoft Clarity, Ahrefs Web Analytics, Google AdSense, or another client-side audience-measurement or advertising service.
Cloudflare may create infrastructure and security logs needed to deliver and protect the site. Those provider-side records are described in the Privacy Policy and are not a Mello Zone advertising profile.
Third-party embeds
Discord, YouTube, Twitch, Spotify, VRChat, and similar media are presented behind a click-to-load boundary where practical. The provider receives browser and network information only after the visitor requests that embed.
A remembered provider choice can be revoked in the Privacy Center without changing essential site access.
Change or withdraw a choice
Use the Privacy Center to remove remembered external-media providers. Browser controls can also clear the mz_privacy_mode cookie, local storage, editor authentication, or provider state.
A Global Privacy Control signal remains authoritative while it is active. Loading one external provider on request does not authorize any other provider.
Storage duration and changes
The mz_privacy_mode cookie is configured for up to 180 days and is removed by the edge when the active request signal is absent. Remembered external-media flags remain until removed through the Privacy Center or browser controls. A requested provider may apply its own cookies or storage under its published policy.
This notice will be updated before materially different tracking, advertising, or browser storage is introduced.