Cookie & Tracking Policy

Cookies needed for requested features

The default cr_session cookie maintains a signed-in session for up to 30 days, subject to expiry or revocation. Deployments can configure the cookie name and domain. The cr_admin_elev cookie supports administrator authentication elevation and expires after 30 minutes. The mailbox_oauth_nonce cookie protects mailbox connection authorization and expires after 15 minutes or is cleared during callback handling.

These cookies support authentication and security. Blocking them may prevent sign-in, administrator access, or mailbox connection. Cookie contents should not be shared with others.

Browser storage

Inbox reply drafts may be stored in sessionStorage for the current browser tab and workspace. Browser behavior and restored sessions can affect how long this data remains. Clear drafts and browser site data on shared devices.

Email open and click tracking

When configured for a campaign, tracking can record requests for an email tracking image and visits to tracked links, with related event information. Automated scanners, image proxies, and privacy protections can affect these measurements; they do not prove that a person read a message.

Customers must determine whether tracking is lawful for their recipients and provide required notices and permissions. This policy is not recipient consent.

Optional cookies and third-party services

The reviewed application does not include an optional advertising or website analytics cookie integration. Hosting, payment, mailbox, and external providers may apply their own technologies and policies on their services. Production integrations must be checked before this inventory is finalized.

Optional technologies that require consent must not operate until valid consent has been obtained. A cookie banner is not a substitute for actually controlling those technologies.

Your choices

Use browser settings to inspect, block, or clear cookies and site data. Clearing data may sign you out or remove saved drafts. Manage mailbox permissions with the mailbox provider and use Contact for questions about tracking or storage.