At a glance
- Essential storage keeps you signed in, protects your account and continues a chat.
- Preferences and attribution are optional and stay off until you turn them on.
- We use no advertising or analytics vendors, and turning optional cookies off never stops you from using MAAP.
A quick guide. The full notice below provides the details.
What we store and why
This notice covers maap.dev, the dashboard at app.maap.dev, and the MAAP chat widget. The table below lists everything these sites keep in your browser. Essential items are needed for the site to work and have no switch. Optional items stay off until you turn their purpose on.
There are two optional purposes. Preferences remembers settings such as the inbox sound, playground settings and a remembered chat. Attribution records which campaign or site sent you to MAAP, so we can tell which outreach works. MAAP uses no advertising or analytics vendors and no third-party trackers on these sites, and we do not sell or share this information for advertising.
On maap.dev, the sign-up and team contact forms read the campaign tags in the page address at the moment you submit, and only while attribution is on. Nothing is kept in your browser for that. MAAP keeps campaign tags on its servers only while the consent record for your browser allows attribution, for at most 180 days. Campaign tags collected before these controls existed have no consent record and are not used for anything.
Some information is collected whatever you choose, because the service needs it: sign-in, security and operations records described in the privacy policy. Our security firewall for api.maap.dev also samples a small share of requests, including the full web address, and keeps that sample for about three hours to diagnose blocked traffic. It is never used for attribution. When you pay, Stripe sets its own cookies on its checkout pages under its own policy.
| Purpose | What is stored | Who receives it | How long it lasts | Essential or optional |
|---|---|---|---|---|
| Keeps you signed in. | maap_access_tokenCookie · All maap.dev sites (HttpOnly, not readable by page scripts) | MAAP only | 24 hours, or until you sign out | Essential |
| Renews your sign-in without asking for your password again. | maap_refresh_tokenCookie · All maap.dev sites (HttpOnly, not readable by page scripts) | MAAP only | 7 days, or until you sign out | Essential |
| Remembers your cookie choices so we do not ask on every page. Holds your choices and when you made them, not who you are. | maap_consentCookie · maap.dev and app.maap.dev (local storage if cookies are blocked) | MAAP only; your browser sends it with requests to MAAP | 180 days | Essential |
| Checks whether your browser accepts cookies before saving your choice. | maap_consent_probeCookie · maap.dev and app.maap.dev | Not sent anywhere | Deleted immediately | Essential |
| Your name, email and workspaces, so the dashboard can show them at once. Holds no password or token. | maap-authLocal storage · app.maap.dev | Not sent anywhere | Until you sign out | Essential |
| The page to return to after you sign in. Campaign tags are removed first. | maap-return-urlSession storage · app.maap.dev | Not sent anywhere | Until you sign in or close the tab | Essential |
| The invitation from an invite link while you create your account. | maap-access-invitationSession storage · app.maap.dev | MAAP, when you create the account | Until you create the account or close the tab | Essential |
| The website address and setup details you entered while setting up a workspace. | maap-setup-url:<user>, maap-setup-org:<user>, maap-setup-draft:<user>:<workspace>Session storage · app.maap.dev | MAAP, when you continue setup | Until you close the tab | Essential |
| The live demo you started, so a reload returns to it. | maap-instant-demoSession storage · maap.dev | MAAP, to run the demo | Until you close the tab; the demo itself ends after five minutes | Essential |
| The chat in progress: its conversation ID and visitor token. | maap-widget@<site>, maap-widget@<site>-launcherSession storage · The chat frame on cdn.maap.dev, kept separately for each website | MAAP, to continue the chat | Until you close the tab | Essential |
| Remembers your conversation across visits and that you have seen the welcome message. | maap-widget@<site>, maap-widget@<site>-launcherLocal storage · The chat frame on cdn.maap.dev, kept separately for each website | MAAP, to restore the conversation | Conversation: 24 hours by default; the website operating the widget can set a different period. Welcome message: until you withdraw or clear site data | Optional: preferences |
| Whether the inbox plays a sound for new conversations. | maap.inbox.alert-soundLocal storage · app.maap.dev | Not sent anywhere | Until you change it or withdraw | Optional: preferences |
| Your temperature and length settings for each agent in the playground. | maap-playground-settings-v1Local storage · app.maap.dev | Not sent anywhere | Until you change it or withdraw | Optional: preferences |
| Shows a one-time welcome message after you create your account. | maap-early-access-welcomeSession storage · app.maap.dev | Not sent anywhere | Until the message is shown or you close the tab | Optional: preferences |
| No longer written: the dashboard now follows your device’s theme. An older value is removed when you withdraw. | maap.themeLocal storage · app.maap.dev | Not sent anywhere | Until removed | Optional: preferences |
| No longer written: the dashboard stopped recording which campaign or site sent you, because nothing used the value. An older value is removed when you withdraw or close the tab. | maap-attributionSession storage · app.maap.dev | Not sent anywhere | Until removed or you close the tab | Optional: attribution |
- What is stored
maap_access_tokenCookie · All maap.dev sites (HttpOnly, not readable by page scripts)- Who receives it
- MAAP only
- How long it lasts
- 24 hours, or until you sign out
- Essential or optional
- Essential
- What is stored
maap_refresh_tokenCookie · All maap.dev sites (HttpOnly, not readable by page scripts)- Who receives it
- MAAP only
- How long it lasts
- 7 days, or until you sign out
- Essential or optional
- Essential
- What is stored
maap_consentCookie · maap.dev and app.maap.dev (local storage if cookies are blocked)- Who receives it
- MAAP only; your browser sends it with requests to MAAP
- How long it lasts
- 180 days
- Essential or optional
- Essential
- What is stored
maap_consent_probeCookie · maap.dev and app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Deleted immediately
- Essential or optional
- Essential
- What is stored
maap-authLocal storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until you sign out
- Essential or optional
- Essential
- What is stored
maap-return-urlSession storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until you sign in or close the tab
- Essential or optional
- Essential
- What is stored
maap-access-invitationSession storage · app.maap.dev- Who receives it
- MAAP, when you create the account
- How long it lasts
- Until you create the account or close the tab
- Essential or optional
- Essential
- What is stored
maap-setup-url:<user>, maap-setup-org:<user>, maap-setup-draft:<user>:<workspace>Session storage · app.maap.dev- Who receives it
- MAAP, when you continue setup
- How long it lasts
- Until you close the tab
- Essential or optional
- Essential
- What is stored
maap-instant-demoSession storage · maap.dev- Who receives it
- MAAP, to run the demo
- How long it lasts
- Until you close the tab; the demo itself ends after five minutes
- Essential or optional
- Essential
- What is stored
maap-widget@<site>, maap-widget@<site>-launcherSession storage · The chat frame on cdn.maap.dev, kept separately for each website- Who receives it
- MAAP, to continue the chat
- How long it lasts
- Until you close the tab
- Essential or optional
- Essential
- What is stored
maap-widget@<site>, maap-widget@<site>-launcherLocal storage · The chat frame on cdn.maap.dev, kept separately for each website- Who receives it
- MAAP, to restore the conversation
- How long it lasts
- Conversation: 24 hours by default; the website operating the widget can set a different period. Welcome message: until you withdraw or clear site data
- Essential or optional
- Optional: preferences
- What is stored
maap.inbox.alert-soundLocal storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until you change it or withdraw
- Essential or optional
- Optional: preferences
- What is stored
maap-playground-settings-v1Local storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until you change it or withdraw
- Essential or optional
- Optional: preferences
- What is stored
maap-early-access-welcomeSession storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until the message is shown or you close the tab
- Essential or optional
- Optional: preferences
- What is stored
maap.themeLocal storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until removed
- Essential or optional
- Optional: preferences
- What is stored
maap-attributionSession storage · app.maap.dev- Who receives it
- Not sent anywhere
- How long it lasts
- Until removed or you close the tab
- Essential or optional
- Optional: attribution
Your choices
When you first visit, a banner offers Accept optional, Reject optional and Settings. Settings lets you turn preferences and attribution on or off separately. Closing or ignoring the banner records nothing, and everything optional stays off.
You can change your choice at any time from Cookie settings in the maap.dev footer or in the dashboard menu. Your choice is saved in this browser, is shared between maap.dev and app.maap.dev, and does not follow you to another browser, device or account.
A choice lasts 180 days. After that, optional purposes switch off and we ask again. If we change this notice in a way that affects a purpose, or change what a purpose covers, any purpose you turned on switches off until you choose again. A “no” stays in force, so we do not ask again sooner because of a change. If your browser blocks storage, we cannot save a choice, and optional purposes stay off.
Withdrawing
To withdraw, open Cookie settings and turn a purpose off, or choose Reject optional. The purpose stops at once in every open tab of that site, and the browser storage listed for it in the table is cleared.
Withdrawing stops future optional collection. It does not delete records MAAP already holds, such as your account, security logs or the record of the choices you made, which we keep for up to 400 days to show what you chose and when. The one exception is campaign tags saved under the consent you withdrew: we delete those.
To ask us to delete other information, email privacy@maap.dev.
The chat widget on other websites
Businesses add the MAAP chat widget to their own websites. There, the business that runs the site owns the cookie banner, and your choice on its banner decides what the widget may store. A choice made on maap.dev never applies to another website, and a choice made on another website never applies to maap.dev.
With no choice or a “no”, the widget keeps only the chat in progress in session storage, which the browser removes when you close the tab. With a “yes”, it also remembers the conversation for 24 hours by default and that you have seen the welcome message. The website operating the widget can set a different conversation retention period. The widget sets no cookies and runs no analytics or advertising code. Messages and the contact details you type are never kept in your browser.
MAAP controls only the widget. It does not control other analytics, advertising or tracking on the business’s website; read that website’s own notice for those. Businesses can read how to connect their banner in the widget documentation.
The widget follows these decisions:
- Continuity of the conversation the visitor is currently having (the visitor token and conversation ID for the active session) is essential to the requested service. Remembering the visitor across visits, the welcome-popup “seen” flag and the sound preference are optional and stay off until the host reports a grant.
- With no CMP present, the widget behaves as if optional purposes were denied. It never shows its own banner on a customer site and never asks the visitor itself.
- Withdrawal clears the optional state on the spot; the active conversation continues until the tab closes and is not restored on the next visit.
SMS and account messages are separate
Cookie choices cover only browser storage and optional tracking. They do not change SMS notifications, account, billing or security email, marketing email, or your acceptance of the terms of use. Each of those has its own controls: SMS in the dashboard’s notification settings, and marketing email through its unsubscribe link.
Turning optional cookies off never stops you from signing in, paying, or chatting with an agent.