Last Revised: September 21, 2026
mw_session: the essential session cookie. It holds your encrypted Spotify connection, is locked to httpOnly so scripts cannot read it, and expires after 2 hours or the moment you press Leave.
mw_csrf: a one hour anti-forgery token that protects buttons and forms from cross-site trickery.
No analytics cookies. No advertising cookies. No cross-site tracking. There is nothing here that follows you after you leave the room.
Pressing Leave clears both cookies immediately. You can also clear them any time in your browser settings without breaking anything beyond signing you out.