Draft. Review with qualified counsel if you operate in a jurisdiction that requires explicit cookie consent.
MailHook uses a small, purpose-built set of cookies. We do not run advertising, remarketing, or third-party analytics cookies.
Cookies we set
| Name | Domain | Purpose | Lifetime |
|------|--------|---------|----------|
| sb-*-auth-token | app.mailhook.in | Supabase Auth session; essential for signing into the dashboard. | Session (refreshed on use) |
| __cf_bm | *.mailhook.in | Cloudflare bot-management signal. Set automatically when you load pages served through Cloudflare. No user-level tracking. | 30 minutes |
The contact form on mailhook.in/contact is protected by Cloudflare Turnstile. Turnstile may set short-lived cookies or local storage in your browser to score the challenge and prevent abuse.
Local storage
The dashboard stores non-identifying UI preferences in localStorage (e.g., theme, sidebar collapse state, selected account). These never leave the browser.
Cookies we do not set
- Ad-network cookies.
- Cross-site tracking cookies.
- Third-party product analytics cookies.
Your choices
You can block or delete cookies via your browser settings. Blocking the Supabase authentication cookie will prevent you from signing into the dashboard. Blocking __cf_bm may degrade Cloudflare's ability to filter bot traffic.
Contact
Questions? support@mailhook.in