Cookie Statement
Effective and last updated: 25 August 2026 · Version 2026-08-25
TomatoMC uses cookies and similar storage to provide and secure the website. The Tebex checkout loads only after you deliberately confirm that you want to open it. Tebex may then use its own technical, usage, security and analytics storage under its notices; TomatoMC cannot classify every third-party checkout cookie as strictly necessary.
1. Necessary and requested login cookies
| Name | Purpose | Duration | Type |
|---|---|---|---|
tomatomc_session | Maintains your session, login state, security messages and CSRF protection. | Browser session | Strictly necessary, first party |
tomatomc_remember | Restores your account session only when you select “Remember me”. Contains a rotating random token, never your password or 2FA code. | Up to 30 days, or until manual logout/revocation | Requested functional, first party |
2. Embedded Tebex checkout
Tebex.js and the embedded Tebex checkout load only on the secure checkout page after you confirm that choice. Tebex may use cookies or local storage for basket state, authentication, payment processing, fraud prevention, service measurement and other purposes described in the Tebex Privacy Notice and Tebex Cookie Policy. TomatoMC receives only limited order-status information and does not receive payment-card or bank credentials.
3. Choice and consent
The TomatoMC session cookie is strictly necessary for account and checkout security. We do not load the embedded Tebex checkout merely by browsing the catalogue: you must explicitly continue from the confirmation page. Any optional first-party analytics, advertising or tracking technology will remain disabled until a valid choice is provided. Third-party storage inside Tebex checkout is governed by Tebex's notices and can also be controlled through your browser.
4. Cloudflare and local storage
Cloudflare may process network identifiers and security signals to deliver and protect the site and may set strictly necessary security cookies when its protection features require them. TomatoMC uses first-party local storage only to remember that a particular major announcement was dismissed. It is not used for advertising or cross-site tracking.
5. Managing cookies
You can delete or block cookies in your browser. Blocking the session cookie will prevent login and may break forms and other secure features; blocking Tebex storage can prevent checkout from working. You can browse the TomatoMC catalogue without loading the embedded checkout.
6. Changes and contact
This statement will be updated before optional tracking technology is enabled. Questions can be sent through the Support Center.