Cookies are small text files stored on your device when browsing websites. They help remember your preferences and enable proper functioning of the service.
Required for basic functionality: login, session maintenance, language selection. Without these, the service cannot function.
Remember optional interface settings, such as whether the sidebar is collapsed. They are stored only after functional consent.
Help us measure service usage, errors and performance. Google Analytics 4, browser-side Sentry and Vercel Speed Insights are not enabled before analytics consent.
Meta Pixel and Google marketing tags in Google Tag Manager are used for ad measurement and retargeting. They are not enabled before marketing consent.
On pro.mavify.io, after a specialist signs in, we synchronize only the value, version and time of the marketing-category choice with the account. This governs later server-side conversions described in the Privacy Policy. We do not store an IP address, user agent, referrer or campaign parameters in this process; withdrawing the marketing category blocks conversions that have not been sent.
This inventory reflects the integrations present in the code. Analytics and marketing tools load only after consent for the relevant category; some entries use localStorage or sessionStorage rather than cookies.
| Name | Provider | Category | Purpose | Retention |
|---|---|---|---|---|
| cookie-consent-v2 (localStorage) | Mavify | Essential | Stores the granular consent choice and the time it was updated. | Until settings are changed or site data is cleared; no automatic expiry. |
| sb-<project-ref>-auth-token* | Supabase / Mavify | Essential | Maintains a secure signed-in session; a long value may be split across several cookies. | The technical Max-Age in the @supabase/ssr version in use is 400 days. The cookie is refreshed during the session, while the actual session may end earlier on sign-out, expiry or revocation. |
| NEXT_LOCALE | Mavify | Essential | Remembers the selected language and routes the visitor to the correct service version. | 1 year. |
| sidebar-collapsed | Mavify | Functional | Remembers whether the application sidebar is collapsed or expanded. | 1 year; stored only after functional consent and removed when it is withdrawn. |
| google_oauth_state, mollie_oauth_state | Mavify / Google / Mollie | Essential | One-time CSRF security state while connecting Google Calendar or a Mollie account. | 5 minutes; also removed after the callback completes. |
| _ga, _ga_<measurement-id>, _gid, _gat* | Analytics | Distinguishes visits and sessions for Google Analytics 4. | Google configures _ga and _ga_<measurement-id> for 2 years, subject to shorter browser limits; _gid for 24 hours and _gat* for 1 minute. | |
| _gcl_*, _gac_* | Marketing | Measures ad clicks and conversions when the relevant tags are configured in Google Tag Manager. | Usually up to 90 days; depends on the active Google tag configuration. | |
| _fbp, _fbc | Meta | Marketing | Measures ad performance and conversions and supports retargeting through Meta Pixel. | Meta states a 90-day lifespan for _fbp and _fbc; storage may end earlier. _fbc is created only when an ad-click identifier is available. |
| sentryReplaySession (sessionStorage) | Sentry | Analytics | Reports browser errors and, for sampled sessions, provides diagnostic Session Replay. It sets no cookie; a Replay identifier may be stored in sessionStorage. | Until the browser session ends; removed when analytics consent is withdrawn. |
| — | Vercel | Analytics | Speed Insights performance measurement on pro.mavify.io when enabled. It stores no persistent identifier in cookies, localStorage or sessionStorage. | No persistent browser storage; data is sent only after analytics consent. |
You can change or withdraw consent at any time using the "Cookie Settings" button in the footer or the floating cookie icon. Withdrawal stops the relevant integrations and removes known identifiers accessible to Mavify; third-party cookies on provider-owned domains must be removed in your browser or provider settings.
After the relevant consent, we use Google Analytics and Google Tag Manager, Meta Pixel, Sentry and — on pro.mavify.io — Vercel Speed Insights. When you go to Google or Mollie to connect an account, those providers may also use cookies on their own domains.
This policy may be updated. The current version is always available on this page, and we will notify you of significant changes by email.
Last updated: 8/2/2026
