Cookie Policy

This Cookie Policy explains how Malta Discount Card Ltd (company registration number C72373, registered office 33 Triq Papa Piju XII, Birkirkara, Malta) uses cookies and similar technologies to recognise you when you visit our platform. It should be read alongside our Privacy Policy, which carries our full company and contact details.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site function and remember information about your visit.

Cookies we use

• Strictly necessary (authentication):

  we set two first-party cookies, accessToken and refreshToken, to sign you in and keep your session secure. These are essential — the site cannot function without them, and they are not used for tracking.

• Strictly necessary (security):

  our backend sets csrftoken, which protects forms and account actions against cross-site request forgery. It identifies a form submission, not a person.

• Strictly necessary (your cookie choice):

  mdc_cookie_consent records the decision you make below, so we do not ask again on every page. Storing a preference is itself exempt from consent, and auth_relay_nonce is a short-lived one-time value used to complete a sign-in securely.

• Affiliate attribution (optional):

  if you accept below and arrive through a partner's link, we set one first-party cookie, mdc_ap_id, recording the referral code that link carried. It lasts 90 days and is used only to credit the partner it belongs to if you buy a card. It does not identify you, is not shared with advertisers, and is not used to build a profile of your browsing. It is one of the optional families on this site: decline, or withdraw later, and it is not set at all — or deleted if it already was.

• Analytics and advertising (optional):

  if you accept below, the Google tag loads and sets its own cookies: "Google Analytics", setting _ga and _ga_<property>, and "Google Ads", setting _gcl_au. It measures visits and which adverts brought you here, on Google's own policies: Google Privacy Policy, how Google uses cookies. Decline, or withdraw later, and it does not load; the cookies it already set are deleted when you withdraw.

• Analytics and advertising (optional):

  if you accept below, the Meta Pixel loads and sets its own cookies: _fbp and _fbc. It measures visits and which adverts brought you here, on Meta's own policies: Meta Privacy Policy, your ad settings. Decline, or withdraw later, and it does not load; the cookies it already set are deleted when you withdraw.

• Third-party sign-in (Google):

  if you choose to sign in with Google, Google's sign-in service may set its own cookies under Google's domains, governed by Google's Privacy Policy. These are used only to complete the login you initiate.

• Referral links (browser storage):

  if you arrive through a friend's referral link, we keep that referral code in your browser's local storage and record the click, so your friend can be credited if you go on to sign up — including if you come back later and sign up then. It has no expiry of its own: it stays in your browser until a completed purchase for a new card consumes it, and it is not used to build a profile of you.

Analytics and advertising

With your permission we load a measurement and advertising tag from Google and a measurement and advertising tag from Meta. The Google Ads and Meta Pixel tags are the only advertising cookies on this site. They load only when you allow the Marketing and attribution category below. Refusing keeps them off, and withdrawing your permission later tells them to stop and deletes the cookies they set.

Their data goes to the company that sets them, never to another advertiser, and we do not sell your personal data. Google's own terms: Google Privacy Policy and how Google uses cookies. Meta's own terms: Meta Privacy Policy and your ad settings.

Your choices

The first time you visit, we ask before setting any cookie in the Marketing and attribution category below. Refusing takes exactly one click, the same as accepting, and refusing changes nothing about how the site works for you.

There are two categories:

• Strictly necessary

  — sign-in, security and checkout, as listed above. These cannot be switched off; they are exempt from consent because the site cannot deliver what you asked for without them.

• Marketing and attribution

  — a cookie that records which partner you arrived through, so that partner can be credited. This one is optional and is only stored if you allow it. The tags described above are in it too: the Google tag and the Meta Pixel.

The referral-link storage described above sits outside this choice: it is not currently governed by the categories below, and refusing does not switch it off. We are reviewing whether it should be, and this page will say so when that is settled.

Withdrawing permission also deletes what was stored under it. We remember your choice for six months, after which we ask again.

If your browser sends a Global Privacy Control signal and you have not already made a choice here, we treat that signal as a refusal and do not ask — you can still opt in through Cookie Settings if you want to. A choice you have already made on this site stays in force until you change it.

Separately, most browsers let you refuse or delete cookies through their own settings. Blocking strictly necessary cookies may affect core functionality such as signing in.

Changes to this policy

We may update this Cookie Policy from time to time. The "last updated" date above reflects the latest revision.

Contact

If you have questions about our use of cookies, write to info@maltadiscountcard.com or contact us via the Contact page.