Cookie policy

• On your first visit a banner asks whether you accept analytics. Accept all and Reject all carry equal weight, and pressing Escape, or closing the preferences window without saving, means no.
• Nothing optional runs before you accept: the Google Analytics script isn't loaded at all, and Replit's visitor statistics are switched off in your browser.
• Your choice is kept in this browser for 12 months, after which we ask again. We also ask again if we add a new kind of optional cookie. Each browser keeps its own choice, so signing in on another device means choosing again there.
• You can change your mind at any time with Cookie settings at the foot of the Mailbridge pages, under Your data in the console, or with the button above. Turning analytics off deletes Google Analytics cookies from this browser straight away.

These are set by Mailbridge itself, are never shared, and don't need consent because the service can't work without them.

mb_sessionUp to 7 days

Keeps you signed in. HTTP-only and secure. The session ends sooner after 12 hours without activity, or when you sign out.

mb_email_challenge10 minutes

Links a sign-in code to the browser that asked for it, so a code can only be used where it was requested.

mb_oauth_browser10 minutes

Links the return from Microsoft to the browser that started a Microsoft sign-in or mailbox connection.

Mailbridge also keeps these small items in your browser's storage. They are needed for the site to work or to respect your cookie choice, so they don't need consent.

mb_cookie_consentLocal storage, 12 months

Your cookie choice and when you made it.

mb_consent_client_idLocal storage, until you clear site data

A random ID sent with each cookie choice, so the choices made on this device can be shown to you. It identifies the browser, not you, and isn't used for anything else.

umami.disabledLocal storage, while analytics is off

Tells Replit's visitor statistics not to send anything. Removed when you accept analytics.

mb_signed_outLocal storage, until you sign in again

Remembers that you signed out, so every open tab leaves the console.

mailbridge:reloaded-forSession storage, until the tab closes

Stops a page reloading twice after a new version of Mailbridge is published.

_gaGoogle, 2 years

Google Analytics 4. Tells one visitor's visits apart from another's.

_ga_K48X1GY867Google, 2 years

Google Analytics 4. Keeps track of the current visit.

Replit visitor statisticsReplit, no cookies

Replit, which hosts Mailbridge, counts visits for us. When you allow it, its script sends the page address, the page you came from, your screen size and your browser's language to Replit.

With your permission, Google receives the pages you view, how you got there, and details of your device and browser. Google Analytics 4 doesn't log or store IP addresses. We've turned off Google signals and ad personalisation, and we never use analytics for advertising or remarketing. Analytics never sees your email, calendar or mailbox settings. Google may handle this data outside the UK, as the Privacy policy explains.

• Stripe: checkout and the billing portal run on Stripe's own site, which sets its own cookies under Stripe's cookie policy.
• Microsoft: signing in with Microsoft, or connecting a Microsoft mailbox, happens on Microsoft's site, which sets its own cookies.
• Google Fonts: our pages load their typefaces from Google Fonts. No cookies are set, but your browser sends your IP address to Google to fetch them.

Each time you save a choice, we add it to a log on our server so we can show that we asked and what you chose. Each entry holds the date and time, your choice, the policy version, whether you used the banner or the preferences window, the random browser ID described above, your account if you were signed in, your IP address and your browser description. We keep it because the law requires us to be able to show consent (UK GDPR article 7).

Choices linked to your account

Kept while you have an account. Choices made in this browser before you signed in are linked to your account when you view your cookie history. When you delete your account, the link to you is removed and the entries are deleted as below.

Other choices

Deleted after 395 days (about 13 months: the 12-month choice period plus a month).

Signed in, you can see your cookie history under Your data and download it as JSON or CSV. It's also part of Download my data.

Email privacy@mailbridge.ai about anything in this policy. The Privacy policy covers everything else Mailbridge stores.