About this notice
This Notice explains browser storage and similar technologies used by MARTI RIKINA Partners on partners.martirikina.com, including its public pages, the factory application form and the supplier, customer and operator cabinets. “Cookies” below includes cookies, local storage and comparable browser-based identifiers.
Strictly necessary technology
MARTI RIKINA Partners uses only essential technology needed to provide secure accounts and core functions. Your signed-in session is kept in two first-party cookies of partners.martirikina.com: __Host-mrp-rt holds the refresh token for up to 30 days, and __Host-mrp-at holds the current access token until it expires, normally within an hour. Both are HttpOnly, Secure and SameSite=Lax: page scripts cannot read them, the browser sends them only over HTTPS to this site, and other sites cannot attach them to their own requests. Supabase Auth still decides whether a session is valid, and the operator's second-factor state is part of that session. The browser's local storage holds one entry without any token, mrp-session-hint (your account id, email, second-factor level and session expiry), so a cabinet opens quickly and other tabs notice a sign-out. A session an earlier version kept in local storage (a key beginning with sb-) is moved into the cookies once and then deleted. The operator's own test cabinets alone may also keep the session of the other test cabinet in one more cookie of the same kind, __Host-mrp-tc-customer or __Host-mrp-tc-supplier, for up to 30 days, so the test switch can return to it. Vercel infrastructure may process routing, security and request identifiers and operational logs to deliver pages, prevent abuse and diagnose failures. The supplier workspace stores one functional preference cookie, marti_supplier_locale, holding only the interface language you chose (English or Chinese) for up to one year; it carries no identifier and is never used for tracking.
These technologies are required for the service requested by the user. If you block or clear them, sign-in and protected workspace features may stop working and you may need a new email sign-in link.
Public pages and the factory application form
The public pages and the factory application form set no cookies and store nothing in your browser. To limit abuse, the server that receives an access request keeps a hashed, non-reversible identifier of the connection in memory for up to one hour and nothing else.
Advertising and analytics
We do not place advertising cookies or use cross-context behavioral advertising on partners.martirikina.com. We do not use optional analytics cookies in its interface. Vercel Web Analytics and Speed Insights count page views and measure page performance without cookies and without storing an identifier in your browser. If this changes, we will update this Notice and provide consent controls where required.
Transactional and notification email
Sign-in, security and notification emails are delivered by Resend and may generate operational delivery records such as send time, delivery status, bounce information and security diagnostics. Sign-in links contain short-lived credentials or tokens and should not be forwarded. Notification emails carry a one-click unsubscribe link with a signed token that identifies only your notification preference; opening it turns the notifications off and sets no cookie.
Your controls
You can inspect, block or delete cookies and site data through browser settings. Blocking all browser storage may prevent MARTI RIKINA Partners from maintaining an authenticated session. Signing out deletes both session cookies and the session hint and ends the session at Supabase on that browser; clearing site data removes them and the language preference. Because MARTI RIKINA Partners uses only strictly necessary cookies, it shows no cookie banner.
Updates and contact
We may update this Notice when we add or change technology. Questions about browser storage on partners.martirikina.com can be sent to packaging@martirikina.com.