Cookies, kept honest.

• We use a small set of strictly necessary cookies and local-storage entries to run the product. You can't opt out of these without breaking sign-in.
• We use one optional category today — product analytics — and only ever load it after you've said yes.
• We don't currently run advertising, retargeting, fingerprinting, or session-replay cookies. If we ever add a new category, we'll add it as a separate opt-in and re-prompt you via the banner before any new tag loads.
• You can change your mind any time: open cookie preferences.

"GenieOS", "we", "us", and "our" refer to Mail Genius Ltd, a company registered in England & Wales with company number 17183230 and registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. GenieOS is a trading name of Mail Genius Ltd.

For UK GDPR purposes we are the data controller of any personal data we set or read via cookies on this site (essentially: a session id and — if you opt in — a pseudonymous analytics identifier). The full controller / processor breakdown for data inside the product itself lives on our Privacy Policy.

A "cookie" is a tiny piece of text a website asks your browser to remember and send back on the next visit. Modern apps also use a few related browser features — localStorage, sessionStorage, and IndexedDB — for the same purpose. We treat all of them as cookies for the purposes of this policy and the consent banner.

These are required for GenieOS to function. We rely on them under the "strictly necessary" exemption in the UK Privacy and Electronic Communications Regulations (PECR) and Article 5(3) of the EU ePrivacy Directive — meaning we don't ask for consent because the alternative is a broken product.

• Session & sign-in. Firebase Authentication writes a small set of cookies and IndexedDB entries so you stay signed in between page loads and across tabs.
• CSRF / security tokens. Used to bind your session to your browser and stop cross-site request forgery.
• Workspace state. The id of the workspace you last opened, your cookie-consent decision, and a handful of UI preferences (e.g. left-rail collapsed) are stored in localStorage so the app loads in the state you left it.

With your consent we load Google Analytics 4 (via Firebase Analytics) to understand which features get used and where errors occur. We configure it conservatively:

• IP addresses are anonymised at collection.
• We do not enable Google Signals, demographics, or ad-personalisation features.
• We do not link analytics events to your customer record.
• Data is retained for 14 months on rolling basis.

See the sub-processors page for the lawful-transfer mechanism (SCCs + UK IDTA) we rely on for this provider.

The following categories are not currently loaded on this site. Some of them — particularly limited advertising performance measurement — we may choose to add later as the company grows. If we do, the change will appear as a new opt-in category in the cookie banner and the inventory below before any tag fires:

• Advertising, retargeting, or audience-list cookies.
• Browser fingerprinting.
• Session replay (Hotjar, FullStory, LogRocket, etc.).
• Third-party social embeds that drop cookies on the marketing site.

Two things will never change, regardless of which categories we add:

• We will not load any optional cookie before you've consented in the banner — and we'll re-prompt you whenever the categories change.
• We will not sell your personal data, and we will not enable advertising features that share data with third parties for cross-context behavioural advertising without an explicit, separate opt-in.

Email-tracking pixels in the campaigns you send are a separate decision — controlled per-campaign in Settings → Workspace → Tracking and disclosed to your recipients in your own privacy notice, not ours.

We refresh this table when we add or remove a vendor. If you spot something on a real page that isn't listed here, email [email protected] and we'll either fix the page or update the inventory.

The first time you visit the marketing site we show a small banner. You can:

• Accept the optional analytics category, or
• Choose just essentials — in which case no analytics tags load at all, on any page, until you change your mind.

To change your decision later: open cookie preferences — or use the "Cookie preferences" link in the footer of any marketing page.

All major browsers let you block, delete, or be warned about cookies. Helpful guides:

• Chrome
• Firefox
• Safari
• Microsoft Edge

We also honour the Sec-GPC Global Privacy Control header — if your browser sends it, we treat it as an opt-out signal and won't load optional analytics even if you haven't visited the banner yet.

If we add a new cookie category we'll re-prompt you via the banner before loading anything. Editorial changes (typos, clarifications) are made silently — the "Last updated" date at the top of the page is the canonical record.

Questions about cookies, data subject requests, or how we configure analytics: [email protected].

Anything contractual or legal-notice shaped: [email protected].

Postal: Mail Genius Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.