Cookie policy
Effective 23 Oct 2026 · If the Arabic and English texts differ, the Arabic text governs.
Cookies and similar storage are small pieces of information a website keeps on your device. This page lists everything Mudarraj keeps on yours, what is strictly necessary and what waits for your consent, the outside services that may appear inside our pages, and how to change your choice at any time. It applies to the Mudarraj platform, to every academy's site on it, and to the discipline sites.
In short
- Everything in the table at the end of this page is set by Mudarraj itself (first-party). We use no analytics tool, no advertising pixel and no third-party tracker.
- Most of it is strictly necessary: signing you in, keeping your account safe, remembering your theme, your guest cart, and your own consent choice. The law allows these without consent, so the banner does not ask about them.
- Two items are optional and wait for your consent: remembering the camera and microphone you pick for live rooms (preferences), and a referral code from a shared link (marketing).
- A lesson hosted on YouTube loads from YouTube only after you press "Play from YouTube" on it (or straight away if you allowed the marketing category).
The consent banner and your choice
On your first visit a banner offers three buttons of equal weight: Reject all, Customize and Accept all. Nothing is pre-ticked and nothing optional runs before you answer. Your answer is kept on your device for six months, then we ask again; we also ask again when this policy changes in a way that matters (its version is the date at the top of this page).
You can change your mind at any time: "Cookie settings" at the bottom of every page, in Settings → Privacy & account, and on this page all open the same panel. Switching a category off deletes what it stored and reloads the page, so the withdrawal takes effect at once.
Each answer sends us a receipt — what you chose, when, and the policy version — so that we can show that consent was given (GDPR Article 7(1)). The receipt holds no IP address, no browser details and no visitor identifier; it is linked to your account only if you were signed in, and it is deleted after 365 days.
The three categories
- Strictly necessary — always on. The sign-in and session cookies, the device identifier that enforces the academy's device limit, the theme you chose, your guest cart, the questions you flag during a quiz, a one-time reload guard in live rooms, and your consent choice itself.
- Preferences —
mdr.room.devices: the camera and microphone you picked in the live-room lobby, so you need not pick them again. Without this category the choice lasts for the page only. - Marketing —
mdr_ref: a referral code from a shared link (?ref=), kept so a purchase credits the person who sent you here. It is only ever sent with an order you place yourself, and no advertising platform is involved. Without this category the code is not stored, and a code stored earlier is removed. The same category also lets lessons hosted on YouTube load straight away, without waiting for you to press play (see below).
Services from other companies
- Cloudflare Stream — videos uploaded to the platform play from Cloudflare's servers through short-lived signed links. Like any server you load a video from, Cloudflare sees your IP address and the technical details of the request.
- YouTube (Google) — a lesson an academy hosts on YouTube is shown as a placeholder until you press "Play from YouTube". Only then is anything loaded from YouTube, through the
youtube-nocookie.complayer — or straight away, if you allowed the marketing category. YouTube may then store data on your device under Google's privacy policy. - Paymob — paying by card, mobile wallet or payment kiosk takes you to Paymob's own page, which sets its own cookies under its own policy. Nothing from Paymob loads inside our pages.
- Live rooms (LiveKit) — live sessions run on our own servers with the open-source LiveKit software. No other company is involved, and nothing is stored on your device beyond the items in the table.
Controlling storage in your browser
You can view, delete or block cookies and site data in your browser's settings. Blocking the strictly necessary items means you cannot sign in or stay signed in; deleting mdr_did makes the platform treat your device as a new one, which may count against your device limit. Deleting the preference item or the consent choice does no harm: the site simply asks again.
Changes to this policy
When we add a cookie, a storage item or an outside service, we update the table and the version date at the top of this page, and the banner asks for your consent again where it is needed.
Contact us
For any question about cookies, write to privacy@mudarraj.dev. Your rights over your data are explained in the privacy policy.
Everything we keep on your device
The table below is generated from the application's own code, so it always lists exactly what the current version sets, with its real lifetime.
| Name | Purpose | Category | Set by | Lifetime |
|---|---|---|---|---|
mdr_atCookie | Keeps you signed in while you browse. | Strictly necessary | Mudarraj (first-party) | 15 minutes, renewed while you use the site |
mdr_rtCookie | Renews your session without asking for your password each time. | Strictly necessary | Mudarraj (first-party) | 30 days |
mdr_didCookie | A random ID for this device, for the device limit and to protect your account from sharing. Our servers keep only a hash of it. | Strictly necessary | Mudarraj (first-party) | 400 days |
mdr_themeCookie | The theme you chose (light, dark or match device). Set only when you pick one yourself. | Strictly necessary | Mudarraj (first-party) | 365 days |
mudarraj.consent.v2Browser storage | Your answer to the consent banner: what you allowed, when, and which version of this policy you answered. | Strictly necessary | Mudarraj (first-party) | 180 days |
mdr_cart_v1Browser storage | The courses a visitor puts in the cart before signing in (ids only, never prices). Merged into your account's cart at sign-in, then removed. | Strictly necessary | Mudarraj (first-party) | Until you remove it, or the site clears it |
mdr.quiz-flags.*Tab storage | The questions you marked for review during a quiz attempt, so they survive a reload of the page. | Strictly necessary | Mudarraj (first-party) | Until you close the tab |
mdr.room.policy-reloadTab storage | Lets a live-room page reload once when the browser opened it under another page's camera policy — never twice. | Strictly necessary | Mudarraj (first-party) | Until you close the tab |
mdr.room.devicesBrowser storage | The camera and microphone you picked in the live-room lobby, so you need not pick them again. | Preferences | Mudarraj (first-party) | Until you remove it, or the site clears it |
mdr_refBrowser storage | A referral code from a shared link (?ref=), so a purchase credits the person who sent you here. Sent only with an order you place yourself. | Marketing | Mudarraj (first-party) | Until you remove it, or the site clears it |
Nothing in this table is set by another company. What outside services may store once you use them is explained above.