Cookie Policy

Brand My Inbox uses essential browser storage for authentication, security, service operation, and the consent record. Optional analytics and marketing technologies are not required to use the public site and remain blocked until the relevant consent is recorded.

One optional analytics technology is in use: Google Analytics 4 (measurement ID G-7PMV8VRV5C), which measures which pages are visited and how people move through the site. It is switched off by default. The measurement script is not requested from Google until you accept the Analytics category, so declining it means no connection to Google is made and no analytics cookie is written. Accepting it, and then withdrawing, deletes the analytics cookies already on your device.

Strictly necessary: authentication, load handling, security, requested workflows, and consent memory. Preferences: optional language or interface settings. Analytics: optional aggregated audience and product measurement. Marketing: optional campaign attribution, advertising, or cross-site technologies.

brandmyinbox_consent_v1 is first-party local storage used to remember category choices, consent version, timestamp, and whether GPC was detected. It expires logically after 180 days, when the consent version changes, or when the user clears browser storage.

A single first-party session cookie is set when you sign in; it is required for the service to work and is never used for advertising. Cookie names, purpose, duration and domain are re-scanned after every vendor change.

Only if you accept the Analytics category, Google Analytics sets _ga and _ga_G-7PMV8VRV5C. Both are first-party cookies holding a randomly generated identifier that distinguishes one browser from another; they last up to two years, are set on the brandmyinbox.com domain, and are used for aggregated audience measurement, never for advertising. Neither exists on the device until consent is recorded, and both are deleted when consent is withdrawn.

On a first visit, users can accept optional categories, choose essential only, or configure each optional purpose separately. Optional storage must not load before consent. Refusing optional technologies does not block the core public site or account service.

Open Cookie settings in the footer to change or withdraw choices as easily as they were given. A new choice replaces the previous one for future processing. Brand My Inbox asks again after 180 days or when the consent model materially changes.

When the browser sends a recognized Global Privacy Control signal, Brand My Inbox records it and keeps marketing sharing disabled. A future advertising or sale/sharing system must also consume this signal server-side where required.

Cloudflare, Google where you connect a Google service, SUMIT during checkout, and embedded media may use necessary or optional technologies according to the feature used.

There are no advertising tags on this site. There is one analytics tag, Google Analytics 4, supplied by Google Ireland Limited and listed in section 3; it loads only after you accept the Analytics category. Google processes the data as our processor for aggregated measurement, and this may involve a transfer to the United States, which is covered by the EU-US Data Privacy Framework. Analytics data is not used for advertising or combined with advertising audiences, and we have not enabled Google Signals.

A cookie scan is run across the public, signed-in, checkout and embedded-content flows after every release. Keep consent logs, vendor records, processing purposes, retention, transfer terms, and proof that rejection works. This policy must be updated when the inventory changes.