Cookie Policy

Brand My Inbox uses essential browser storage for authentication, security, service operation, and the consent record. Optional analytics and marketing technologies are not required to use the public site and remain blocked until the relevant consent is recorded.

Two optional analytics technologies are in use, and both are switched off by default. Google Analytics 4 (measurement ID G-7PMV8VRV5C) measures which pages are visited and how people move through the site. Microsoft Clarity (project ygkld3qqls) records how pages are used — scrolling, clicks and the order of screens — as anonymised session replays and heatmaps; it masks the text you type. Neither script is requested from Google or Microsoft until you accept the Analytics category, so declining it means no connection to either is made and no analytics cookie is written. Accepting, and then withdrawing, deletes the analytics cookies already on your device.

Strictly necessary: authentication, load handling, security, requested workflows, and consent memory. Preferences: optional language or interface settings. Analytics: optional aggregated audience and product measurement. Marketing: optional campaign attribution, advertising, or cross-site technologies.

brandmyinbox_consent_v1 is first-party local storage used to remember category choices, consent version, timestamp, and whether GPC was detected. It expires logically after 180 days, when the consent version changes, or when the user clears browser storage.

A single first-party session cookie is set when you sign in; it is required for the service to work and is never used for advertising. Cookie names, purpose, duration and domain are re-scanned after every vendor change.

Only if you accept the Analytics category, Google Analytics sets _ga and _ga_G-7PMV8VRV5C. Both are first-party cookies holding a randomly generated identifier that distinguishes one browser from another; they last up to two years, are set on the brandmyinbox.com domain, and are used for aggregated audience measurement, never for advertising. Under the same category Microsoft Clarity sets _clck (a browser identifier, one year) and _clsk (the current session, one day) on this domain, and Microsoft may set its own cookies on clarity.ms and bing.com to tell one browser from another. None of these exists on the device until consent is recorded, and the first-party ones are deleted when consent is withdrawn.

On a first visit, users can accept optional categories, choose essential only, or configure each optional purpose separately. Optional storage must not load before consent. Refusing optional technologies does not block the core public site or account service.

Open Cookie settings in the footer to change or withdraw choices as easily as they were given. A new choice replaces the previous one for future processing. Brand My Inbox asks again after 180 days or when the consent model materially changes.

When the browser sends a recognized Global Privacy Control signal, Brand My Inbox records it and keeps marketing sharing disabled. A future advertising or sale/sharing system must also consume this signal server-side where required.

Cloudflare, Google where you connect a Google service, SUMIT during checkout, and embedded media may use necessary or optional technologies according to the feature used.

There are no advertising tags on this site. There is one analytics tag, Google Analytics 4, supplied by Google Ireland Limited and listed in section 3; it loads only after you accept the Analytics category. Google processes the data as our processor for aggregated measurement, and this may involve a transfer to the United States, which is covered by the EU-US Data Privacy Framework. Analytics data is not used for advertising or combined with advertising audiences, and we have not enabled Google Signals.

A cookie scan is run across the public, signed-in, checkout and embedded-content flows after every release. Keep consent logs, vendor records, processing purposes, retention, transfer terms, and proof that rejection works. This policy must be updated when the inventory changes.