--- title: "Cookie Policy | MailDeck" description: "Which cookies maildeck.co uses, what the analytics and marketing categories collect, how visitor identification works, and how to change your choice." canonical: "https://maildeck.co/legal/cookies" last-updated: "2026-09-19" --- > Which cookies maildeck.co uses, what the analytics and marketing categories collect, how visitor identification works, and how to change your choice. Legal # Cookie Policy Last updated 19 September 2026 Applies to maildeck.co and app.maildeck.co This policy explains the cookies and similar technologies used on maildeck.co and in the MailDeck app at app.maildeck.co, what each category collects, and how to change your choice. One choice covers both. maildeck.co is operated by The Scaling Group LLC ("MailDeck", "we"), the controller of the data described here. It supplements our [Privacy Policy](https://maildeck.co/legal/privacy). ## Your choice A small notice offers Deny, Accept all and Settings until you choose. Denying is as easy as accepting and has no effect on your access to the site or the app. What happens before you choose depends on where you are, which we determine from your IP address: - In the EU, EEA, UK or Switzerland (or if we cannot tell): only necessary cookies are used, and nothing is sent to analytics or marketing systems until you accept. - Everywhere else: the Analytics and Marketing & identification categories are on until you opt out. Click Deny, or open Settings, at any time. You can change or withdraw your choice at any time with the Cookie settings link in the site footer, or Privacy settings in the app sidebar. Withdrawing does not affect processing that took place before you withdrew. ## Categories ### Necessary (always on) Remembers your cookie choice so we do not ask again on every page. Used without consent because the site cannot respect your choice without it. ### Analytics Measures how the site and the app are used so we can see which pages are useful and where people stop. We load Google Analytics and record, in our own first-party statistics, the pages and app screens you view, how far you scroll, how long a page is actively in use, and which links and buttons you click, keyed to a random identifier stored in a cookie. Your IP address is not stored in our statistics under this category. ### Marketing & identification With this consent we use your visits for sales and marketing. Specifically, we: - store your IP address together with the pages you view, the site that referred you and campaign parameters (such as utm_source); - identify the company your connection belongs to, using IP-to-company data, and may match that company against business contact data we hold, so our team can reach out with relevant offers; - link your earlier visits to you if you later identify yourself — for example by signing up at app.maildeck.co, starting a checkout, submitting a form or booking a call. Links from this site to app.maildeck.co carry your visitor identifier for this purpose; - allow Google Analytics to use advertising features (ad storage, ad personalisation). The legal basis for the Analytics and Marketing categories is your consent (Article 6(1)(a) GDPR and the ePrivacy rules on cookies). We do not use this data to make decisions that have legal or similarly significant effects on you. ## Cookies and storage we use - site_consent — first-party cookie on .maildeck.co, Necessary. Your choice and the notice version. Expires after 13 months. - site_vid — first-party cookie on .maildeck.co, Analytics or Marketing. A random visitor identifier shared by the site and the app. Expires after 13 months; deleted when you deny. - site_sid, site_region — session storage, Necessary for the notice / Analytics. Groups page views into one visit and remembers which rules apply to you. Cleared when you close the tab. - site_implied — local storage, outside the EU/UK only. Records that the default notice was shown, so it is logged once. - _ga, _ga_* — Google Analytics cookies set by Google, Analytics. Up to 2 years. See Google’s [explanation of how it uses data from sites that use its services](https://policies.google.com/technologies/partner-sites). ## Retention Visit data (page views, IP address, company identification) is kept for up to 13 months after your last visit and then deleted. If you withdraw consent, the visit history linked to your identifier is deleted. A record of each consent decision (time, choices, banner version, and your IP address if you accepted marketing) is kept for up to 3 years so we can demonstrate the consent we rely on. ## Who receives the data The first-party data is stored on our own servers. Google receives Analytics data when you consent to that category. IP-to-company lookups may be carried out by data providers acting on our behalf. Some of these providers are located outside the EEA or UK; where they are, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. ## Location data Your country is looked up from your IP address only to decide which of the rules above apply; it is not stored. IP geolocation by [DB-IP](https://db-ip.com) (licensed under CC BY 4.0). ## Your rights You can access, correct or delete your data, object to its use for marketing, and complain to your data protection authority. To exercise these rights, email [support@maildeck.co](mailto:support@maildeck.co). More detail is in our [Privacy Policy](https://maildeck.co/legal/privacy).