Cookie Policy

MMG Website Cookie Policy
Last updated: 24 August 2026

This Cookie Policy explains what the MMG Engineering website stores in your browser, why it is stored, and how you can change or withdraw your choice. It covers this website only. Payment and checkout happen on Shopify-hosted pages, which set their own cookies under the Shopify privacy terms.

1. Categories we use

We group browser storage into four categories. Optional categories stay switched off until you turn them on; rejecting them is a single click and is presented as an equal choice to accepting.

• Strictly necessary. Required for the cart, the checkout handoff, security, bot protection and the language you are reading right now. These cannot be switched off.
• Preferences. Remembers site settings, such as your chosen language and catalogue view, for future visits.
• Analytics. Optional and off by default. Privacy-limited measurement runs only after you switch this category on, as described in section 3, and you can withdraw it at any time.
• Marketing and third-party media. Allows embedded third-party media, currently our Instagram workshop posts.

2. What is stored in your browser

The website uses browser storage (localStorage and sessionStorage) and a language cookie rather than tracking cookies. The known keys are:

• mmg-consent-v1 — your cookie choices and the policy version they were given against. Necessary.
• mmg-cart-v2 — the contents of your cart before checkout. Necessary.
• mmg-shopify-cart-id — the identifier of the Shopify cart your basket is attached to. Necessary.
• mmg-locale (cookie) and mmg-locale-session — the language you are currently browsing in, so pages render server-side in that language. Necessary for the current session.
• mmg-preferences-v1 — your saved language choice for future visits. Preferences.
• mmg-locale-prompt-dismissed — records that you dismissed the language prompt so it is not shown again. Preferences.
• mmg.catalogue.view — whether you prefer the grid or list catalogue layout. Preferences.
• mmg.recent-searches — your recent catalogue searches, shown in the search dialog. Preferences.
• mmg.analytics.attribution — consent-approved first-touch and last-touch marketing attribution (approved campaign labels and referrer hostname). Written only while the Analytics category is allowed, kept for a maximum of 30 days, and deleted immediately when Analytics consent is withdrawn. Analytics.
• mmg.contact.draft.v1 and mmg.custom-request.draft.v1 — unsent form drafts, kept locally so a refresh does not lose your text. File attachments are never stored in the browser and must be reselected. Necessary for the form you are filling in.

These entries stay in your browser until they expire or you clear your browser storage. Clearing site data removes all of them.

3. Analytics measurement

Analytics is optional, switched off by default, and runs only after you give affirmative consent to the Analytics category. When it is allowed, measurement events are sent from your browser to this website's own address at /api/collect, and this website then forwards them server-side to Google Analytics 4. MMG does not install gtag.js, Google Tag Manager, any Google Analytics browser cookie or any advertising cookie on this website. Events are labelled with a random pseudonymous identifier that is generated per browser tab, held in memory only, and never linked to a customer account. Requests to Google are sent with non_personalized_ads set to true.

The categories of information recorded are:

• the matched page or route type you viewed;
• product and list interactions, such as viewing a product or a collection;
• result-count and search-shape metrics — how many results a search returned and whether it was refined — never the raw words you typed;
• filter identifiers, product handles and public variant identifiers;
• quantities, value and currency;
• cart and checkout intent;
• the completion shape of a custom request (that it was started or completed, not its content);
• chat engagement with the parts assistant (that it was opened or used, not the messages);
• approved UTM campaign labels and the referring hostname.

The following are explicitly not collected by this measurement: names, email addresses, phone numbers or postal addresses; customer, order or payment identifiers; the raw content of searches, forms or chat messages; file names or attachments; authentication or security tokens; IP address collection by MMG; and precise location.

If you withdraw Analytics consent, new analytics dispatch stops immediately, the in-memory per-tab identifier is discarded, and the stored mmg.analytics.attribution entry is deleted.

Checkout is hosted by Shopify. Shopify pages set their own cookies and are governed by Shopify's own privacy and analytics terms, which may record purchase and revenue information independently of this website.

See our Privacy Policy and the Google Privacy Policy for further information.

4. Third-party media is blocked until you allow it

Instagram embeds are not loaded and no Instagram script or frame is requested until you allow the marketing and third-party media category. Until then the gallery shows a placeholder with a link to open Instagram directly, which navigates you to Instagram rather than embedding it here.

5. Security and bot protection

The custom-request and contact forms are protected by Cloudflare Turnstile, a bot-detection service. Turnstile loads on the pages that contain those forms and may set storage in your browser in order to distinguish a human visitor from automated abuse. It is treated as strictly necessary because the forms cannot be submitted safely without it, and it is not used for advertising or cross-site profiling by us.

6. Changing or withdrawing your choice

You can reopen your choices at any time using the Cookie preferences link in the website footer. There you can accept all categories, reject everything that is not strictly necessary, or switch individual categories on and off, and your new choice replaces the previous one immediately. If we materially change the categories or their purposes, the stored version number changes and you are asked again rather than the old choice being reused.

7. Related policies

How MMG Engineering handles personal information is described in the Privacy Policy. Operator and seller identification is set out in the Legal Notice.