Cookie Policy

Last updated: 21 October 2026

This Cookie Policy explains how www.getrivermind.com (the “Website”) uses cookies and similar technologies. The Website is operated by Margins d.o.o., Slavonska avenija 6, 10000 Zagreb, Croatia, the owner of Rivermind. It should be read together with our Privacy Policy.

1. What cookies are

Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage, work in a comparable way. Under EU law (the ePrivacy Directive, as implemented in Croatia, and the GDPR), a website may only store or read such information on your device with your consent, unless it is strictly necessary to provide a service you have asked for.

2. The short version

When you browse the Website, we do not set any cookies and do not use local storage or similar technologies.
We use no analytics, advertising, social media or other tracking, and no third-party scripts, fonts or embedded videos that could set cookies.
That is why you do not see a cookie banner: there is nothing to consent to.
Strictly necessary cookies are set only for authorised Margins staff who sign in to our content management system.

3. Cookies used for staff sign-in

Our content management system (under /admin) is used only by authorised Margins staff. When they sign in, the following first-party cookies are set. They are strictly necessary for the service the staff member has requested, so no consent is required.

rivermind-token

Purpose: keeps a signed-in staff member authenticated.
Type: first party, strictly necessary, not readable by scripts (HttpOnly).
Duration: up to 7 days, or until the user signs out.

rm-google-oauth-state

Purpose: a one-time security value that protects the “Sign in with Google” process against cross-site request forgery.
Type: first party, strictly necessary, HttpOnly.
Duration: 10 minutes; deleted as soon as sign-in completes.

rivermind-theme

Purpose: remembers whether a staff member chose the light or dark interface.
Type: first party, set only when the staff member changes the theme.
Duration: 1 year.

__prerender_bypass

Purpose: lets signed-in staff preview unpublished content before it goes live.
Type: first party, strictly necessary, set only when a preview is opened.
Duration: until the browser is closed or the preview is exited.

Signing in with Google also involves Google’s own sign-in pages, which set cookies under Google’s policies. This applies only to staff members who choose to sign in.

4. Security checks by our hosting provider

Our hosting provider, Vercel, protects the Website against attacks and automated abuse. If a request looks suspicious, Vercel may ask the browser to complete a short security check and set a strictly necessary cookie that records the result. This does not happen during normal browsing, and the cookie is not used to track you.

5. Links to other websites

The Website links to other sites, such as LinkedIn, margins.agency and Rivermind tools on separate subdomains. Those sites may use their own cookies, which are covered by their own cookie and privacy policies.

6. Managing cookies

Because the Website sets no cookies during normal browsing, you do not need to do anything. You can always view, block or delete cookies in your browser settings. Blocking the staff cookies described above only prevents signing in to the content management system; it does not affect the public Website.

7. Changes to this policy

If we ever introduce cookies or similar technologies that are not strictly necessary, such as analytics, we will first ask for your consent through a cookie banner, give you a way to change your choice at any time, and update this policy. The current version is always available on this page with its “last updated” date.

8. Contact

If you have questions about cookies or your personal data, contact Margins d.o.o. at hello@margins.agency. More information about your rights is in our Privacy Policy.