Cookie Policy

We use only strictly necessary cookies and similar technologies (such as local storage in the browser). There are no analytics, advertising or tracking cookies.

Cookies

• authjs.session-token (on a secure connection __Secure-authjs.session-token) — keeps you signed in. Lifetime: up to 30 days (staff: 12 hours).
• authjs.csrf-token (__Host-authjs.csrf-token) and authjs.callback-url (__Secure-authjs.callback-url) — protection against forged requests at sign-in and return to the right page. Lifetime: session.
• NEXT_LOCALE — remembers the site language. Lifetime: 1 year.
• mh-login — sign-in in progress in this browser: the "Check your email" screen. Lifetime: 15 minutes.
• mh-2fa — marks that staff entered the two-factor code. Lifetime: while the staff session lasts, at most 12 hours.
• mh-sr — extends the session at most once a day. Lifetime: 1 day.
• mh-task-draft — a guest's order draft before sign-in. Lifetime: 24 hours.

Local storage in the browser

• taskDraft:v1 (localStorage) — draft of the order form, so what you typed is not lost. Lifetime: until the order is published, "Start over" or sign-out.
• mh:… (sessionStorage) — drafts of other forms: contractor profile, messages, first sign-in, category request. Lifetime: until the tab is closed or sign-out.

Bot protection

Cloudflare Turnstile (bot protection) sets no cookies by default but reads technical data from your browser (such as IP address and user agent) to recognise bots. This is strictly necessary to secure forms. More in the privacy policy.

All cookies and entries listed are exchanged only between your browser and this site, contain no tracking and are used only to run the service. If language versions differ, the Dutch version prevails.