Cookie Policy

Last updated: [DATE]

This policy explains the cookies and similar technologies anymail uses.

1. Strictly necessary

anymail sets a small number of cookies that are required for the Service to work and do not need consent:

• A session cookie that keeps you signed in.
• A short-lived gmail_oauth_state cookie used to protect the sign-in flow against CSRF.
• An intent cookie on .anymail.watch used to carry your choice between the marketing site and the app.

These are essential and are not used for tracking or advertising.

2. Analytics

We use Microsoft Clarity to understand how the product is used and to fix problems. Clarity sets its own cookies and records anonymized sessions. Clarity runs only on our public marketing and sign-in pages. It is never loaded on the pages that show your email, so your email content is not recorded.

Where consent is required, analytics loads only after you accept it, and you can withdraw consent at any time.

TO CONFIRM before publishing: if you decide not to run Clarity at all, replace this section with "we do not use analytics cookies". If you keep it, add a consent banner so Clarity loads only after opt-in (analytics cookies are not strictly necessary).

3. No advertising

We do not use advertising or cross-site tracking cookies.

4. Managing cookies

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop the Service from working. Where analytics requires consent, you can withdraw it at any time.

5. Changes

We may update this policy and will post the new version here with an updated date.

Draft prepared to support Google OAuth verification. Not legal advice.