Information on Cookies

1. What they are and where we use them

Cookies are small files a website stores in your browser; similar tools are pixels and the browser’s local storage (localStorage). We use them on www.mailsenpai.com and en.mailsenpai.com and in the checkout at app.mailsenpai.com. The data controller is Octotech Solutions, with registered office at Via E. Dandolo, 29 – 76123 Andria (BT), Italy, VAT IT07964530724, operating under the MailSenpai brand; its contact details are set out in the privacy notice. The emails we send may contain similar tools (pixels and tracked links): they are described in paragraph 4-ter of the privacy notice.

2. How we collect and record your consent

On your first visit a banner asks whether to accept optional services: you can accept them all, refuse them all just as easily, or choose one by one. Until you choose, only technical cookies are active. You can change your mind at any time from the privacy settings icon at the bottom left, or by deleting cookies in your browser.

The checkout at app.mailsenpai.com receives the choice you made on the website. If you arrive directly, for example from an ad, it asks whether you accept advertising cookies, with refusing just as prominent; the checkout works the same whatever you choose.

Each choice is recorded with date and time, IP address, browser and version of this policy, so that consent can be proven; the record is kept for 5 years.

3. Technical cookies (always active)

They are needed for the website and the checkout to work and do not require consent: WordPress session and security (wordpress_*, wp-settings-*), storage of your cookie choices (wordpress_gdpr_*, up to 12 months), spam protection of forms (Google reCAPTCHA, _GRECAPTCHA), network protection (Cloudflare, __cf_bm, 30 minutes), checkout and client area session. In the browser’s local storage the checkout saves your advertising cookie choice (msp_ads_ok, msp_fb_ok) and a marker that prevents the same conversion from being counted twice (msp_conv_*).

Page usage measurement (MailSenpai). We measure anonymously, without cookies, how pages are used (scrolling, sections, clicks, checkout steps) to improve them.

4. Analytics (with your consent)

Google Analytics 4 (Google Ireland Ltd): measures visits and page use in aggregate form. Cookies: _ga, _ga_* (up to 2 years). We use Google consent mode: if you refuse, no cookies are stored and Google only receives technical signals without identifiers, used for aggregate estimates.

Visit recordings (MailSenpai): only if you accept analytics cookies, we record anonymously how you scroll, move the mouse and click on the pages of the site and the checkout, to understand where the pages are unclear. What you type in forms is never recorded. Recordings stay on our servers in the European Union and are deleted after 30 days. In the browser tab’s storage we only keep a visit code (msp_rec_sid, msp_rec_ok), which disappears when you close the tab.

5. Advertising and campaign measurement (with your consent)

Google Ads (Google Ireland Ltd): measures conversions from our ads and builds audiences to show you relevant ads. Cookies: _gcl_au, _gcl_aw (90 days), IDE and test_cookie on doubleclick.net (up to 13 months). We also use Google consent mode for Google Ads: if you refuse, in the checkout Google only receives technical signals without cookies or identifiers (for example that a page was viewed or a checkout was started), used for aggregate conversion estimates.

Meta Pixel (Meta Platforms Ireland Ltd): measures conversions from ads on Facebook and Instagram and builds audiences. Cookies: _fbp, _fbc (90 days), fr on facebook.com (90 days).

LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company): measures conversions from ads on LinkedIn. Cookies: li_fat_id (30 days), bcookie (1 year), lidc (1 day), AnalyticsSyncHistory and UserMatchHistory (30 days).

Microsoft Advertising (Microsoft Ireland Operations Ltd): measures conversions from our ads on Bing and the Microsoft network and builds audiences. Cookies: _uetsid (1 day), _uetvid (13 months), _uetmsclkid (90 days), with the same values in the browser’s local storage, and MUID on bing.com (13 months). We use Microsoft’s consent mode: if you refuse, no cookies are stored and Microsoft only receives technical signals without identifiers (for example that a page was viewed or that a trial was started).

Capterra (Gartner Digital Markets): a pixel that measures visits coming from our Capterra listings.

Only if you have consented to advertising cookies, some purchase events (trial request, checkout start, trial activation, purchase) are also sent from our servers to Meta and Google, as described in section 4-bis of the privacy notice.

6. Transfers outside the European Union

Google, Meta, LinkedIn and Microsoft may transfer data to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses.

7. How to turn them off

Besides the privacy settings icon, you can block or delete cookies in your browser settings and manage advertising preferences on Google, Meta, LinkedIn and Microsoft. Blocking technical cookies may prevent the website or the checkout from working.