1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to website operators about how users interact with their site.
Cookies set by the website you are visiting are called first-party cookies. Cookies set by parties other than the website you are visiting are called third-party cookies. Third-party cookies enable features or functionality provided by external services, such as analytics, authentication, and payment processing.
In addition to cookies, CoMaxy uses similar tracking technologies including:
- Local storage: Browser-based storage that persists beyond a single session, used to save preferences and workspace settings.
- Session storage: Temporary browser storage that is cleared when you close your browser tab, used for in-session state management.
- Pixel tags / web beacons: Small transparent images embedded in pages or emails that help us track interactions.
- chrome.storage API: Used by the CoMaxy Chrome Extension to store session tokens and activity cache on your local device. This is separate from browser cookies and is covered in Section 7.
2. How CoMaxy Uses Cookies
CoMaxy uses cookies and similar technologies for the following purposes:
- To authenticate your identity and maintain your login session
- To remember your workspace preferences and display settings
- To protect against fraudulent or unauthorized activity
- To analyze how users navigate and interact with the CoMaxy web application
- To measure the performance and reliability of the Service
- To deliver product updates and in-app notifications
- To support integration with third-party services you have connected
3. Categories of Cookies We Use
CoMaxy uses four categories of cookies, as described below. You can manage your preferences for each non-essential category through our Cookie Preferences Centre, accessible via the cookie banner on comaxy.ai.
3.1 Strictly Necessary Cookies
These cookies are essential for the CoMaxy web application to function. Without them, you cannot log in, navigate the platform, or use core features. They do not require your consent under GDPR because they are necessary for the performance of a contract with you.
Strictly necessary cookies cannot be disabled through our Cookie Preferences Centre. You may disable them through your browser settings, but doing so will prevent you from using CoMaxy.
| Cookie Name | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
| __session | Strictly Necessary | Clerk (CoMaxy) | Authenticates your login session and maintains your identity across page loads. | Session |
| __clerk_db_jwt | Strictly Necessary | Clerk | Stores a signed JWT token used to verify your identity with CoMaxy servers. | Session |
| __client_uat | Strictly Necessary | Clerk | Tracks the last user activity timestamp to manage session expiry. | 30 days |
| csrf_token | Strictly Necessary | CoMaxy | Protects against Cross-Site Request Forgery attacks by validating form submissions and API requests. | Session |
| comaxy_workspace | Strictly Necessary | CoMaxy | Stores your active workspace identifier so you are directed to the correct organizational context on login. | 30 days |
| comaxy_plan_tier | Strictly Necessary | CoMaxy | Caches your current subscription plan tier to enforce feature access controls without requiring a server round-trip. | 1 hour |
3.2 Functional Cookies
Functional cookies allow CoMaxy to remember your choices and provide a more personalized and convenient experience. They are not strictly essential, but disabling them may affect your user experience.
| Cookie Name | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
| comaxy_theme | Functional | CoMaxy | Stores your display preference (light mode or dark mode) so it is applied automatically on your next visit. | 1 year |
| comaxy_sidebar_state | Functional | CoMaxy | Remembers whether you have collapsed or expanded the navigation sidebar. | 1 year |
| comaxy_locale | Functional | CoMaxy | Stores your language and locale preference for date, time, and number formatting. | 1 year |
| comaxy_tz | Functional | CoMaxy | Stores your timezone setting used to display activity data and reports in your local time. | 1 year |
| comaxy_onboarding_step | Functional | CoMaxy | Tracks your progress through the product onboarding flow so you can resume where you left off. | 30 days |
| comaxy_dismissed_banners | Functional | CoMaxy | Records which in-app notification banners you have dismissed so they are not shown again. | 90 days |
| intercom-session-* | Functional | Intercom | Maintains your customer support chat session and conversation history. | 1 week |
| intercom-id-* | Functional | Intercom | Identifies your device for continuity of support conversations across sessions. | 9 months |
3.3 Analytics Cookies
Analytics cookies help CoMaxy understand how users interact with the platform, which features are used most, and where users encounter difficulties. This information is used in aggregate to improve the product. Analytics cookies are anonymized and do not track your individual identity outside of CoMaxy.
| Cookie Name | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
| _ga | Analytics | Google Analytics | Registers a unique ID used to generate statistical data on how you use comaxy.ai. Data is anonymized and aggregated. | 2 years |
| _ga_* | Analytics | Google Analytics | Used by Google Analytics 4 to persist session state and track page interactions within a session. | 2 years |
| _gid | Analytics | Google Analytics | Distinguishes users for aggregate analytics reporting. | 24 hours |
| ph_* | Analytics | PostHog | Used by PostHog product analytics to track feature usage, navigation flows, and funnel completion within the CoMaxy app. | 1 year |
| posthog_session | Analytics | PostHog | Identifies a single browsing session within CoMaxy for session-level analytics grouping. | Session |
| comaxy_perf | Analytics | CoMaxy | Collects anonymized performance timing data (page load speed, API latency) to identify performance regressions. | Session |
3.4 Performance and Infrastructure Cookies
These cookies are used to ensure the CoMaxy web application loads reliably and efficiently. They help route your requests to the appropriate server infrastructure and detect technical issues in real time.
| Cookie Name | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
| __cf_bm | Performance | Cloudflare | Manages bot detection and traffic protection to ensure the CoMaxy infrastructure is protected from automated abuse. | 30 minutes |
| cf_clearance | Performance | Cloudflare | Stores proof that a user has passed a Cloudflare security challenge, reducing the frequency of challenge screens. | 1 year |
| netlify_session | Performance | Netlify | Used by Netlify to route requests to the correct deployment and manage edge caching. | Session |
| __stripe_mid | Performance | Stripe | Enables Stripe to detect and prevent fraud during payment processing. | 1 year |
| __stripe_sid | Performance | Stripe | Maintains session state during the Stripe payment flow. | 30 minutes |
| stripe_orig_props | Performance | Stripe | Captures Stripe checkout flow metadata to prevent duplicate payment submissions. | Session |
4. Third-Party Cookie Providers
CoMaxy uses the following third-party services that may set cookies or similar technologies when you use the Service. Each provider's data practices are governed by their own privacy policies, which are linked below.
- Clerk (authentication): clerk.com/privacy
- Stripe (payments): stripe.com/privacy
- Google Analytics: policies.google.com/privacy
- PostHog (product analytics): posthog.com/privacy
- Intercom (customer support): intercom.com/legal/privacy
- Cloudflare (security and performance): cloudflare.com/privacypolicy
- Netlify (hosting): netlify.com/privacy
CoMaxy does not use advertising cookies or tracking pixels for cross-site behavioral advertising. No cookies set by CoMaxy or its sub-processors are shared with advertising networks or data brokers.
5. Cookie Consent and Preferences
5.1 How We Obtain Consent
When you first visit comaxy.ai, you will be presented with a cookie consent banner that explains the categories of cookies we use. You may:
- Accept all cookies
- Reject all non-essential cookies
- Customise your preferences by category through the Cookie Preferences Centre
Strictly necessary cookies are set automatically as they are required for the Service to function. For all other categories, we will only set cookies if you have given your consent or where we have a legitimate interest that overrides your rights.
5.2 Withdrawing or Changing Consent
You can change or withdraw your cookie consent at any time by:
- Clicking the "Cookie Preferences" link in the footer of any page on comaxy.ai
- Accessing your account Settings and navigating to Privacy and Cookie Preferences
- Contacting us at privacy@comaxy.ai
Withdrawing consent does not affect the lawfulness of any processing based on your prior consent. It may affect the functionality of non-essential features that depend on those cookies.
5.3 Consent Records
CoMaxy maintains records of cookie consent, including the date, version of the consent banner presented, and the choices made. These records are stored for a period of 3 years and may be produced as evidence of compliance if required.
6. Managing Cookies Through Your Browser
In addition to our Cookie Preferences Centre, you can control cookies through your browser settings. Most browsers allow you to:
- View all cookies currently stored on your device
- Delete individual cookies or all cookies
- Block third-party cookies
- Block all cookies from specific websites
- Set your browser to notify you before a cookie is set
Instructions for managing cookies in common browsers:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy and Security > Cookies and Site Data
- Apple Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
Please note that blocking strictly necessary cookies through your browser will prevent you from logging into CoMaxy and using the Service. Blocking analytics or performance cookies will not affect your ability to use core features.
For more information about managing cookies across browsers and devices, you can visit:
- www.allaboutcookies.org
- www.youronlinechoices.eu (for EU users)
- www.networkadvertising.org/managing/opt_out.asp
7. CoMaxy Chrome Extension and Local Storage
The CoMaxy Chrome Extension does not use browser cookies. Instead, it uses the Chrome Extension Storage API (chrome.storage.local and chrome.storage.sync) to store data on your device. This is a separate mechanism from browser cookies and operates independently of your browser's cookie settings.
Data stored by the Chrome Extension includes:
- Authentication tokens used to verify your identity with CoMaxy servers
- Active workspace and session identifiers
- Cached activity data pending synchronization with CoMaxy servers
- Extension configuration settings set by your organization's Administrator
This data is:
- Accessible only to the CoMaxy Chrome Extension, not to websites or other extensions
- Encrypted in transit when synchronized with CoMaxy servers
- Cleared automatically when you log out of the CoMaxy Extension
- Not used to track your activity outside of authorized CoMaxy work sessions
You can clear Extension storage at any time by uninstalling the CoMaxy Chrome Extension, which removes all locally stored data from your device.
8. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your activity is not tracked. There is currently no universally accepted standard for how websites must respond to DNT signals.
CoMaxy currently does not alter its behavior in response to DNT signals. However, we do not engage in cross-site behavioral tracking, and our analytics cookies are anonymized and limited to improving the CoMaxy Service. You can achieve equivalent tracking limitations by rejecting analytics and performance cookies through our Cookie Preferences Centre.
9. GDPR-Specific Disclosures
For users in the European Union and European Economic Area, the following additional information applies:
- Legal basis for strictly necessary cookies: Legitimate interests and contractual necessity. These cookies are required to deliver the Service.
- Legal basis for functional cookies: Your consent, obtained through the Cookie Preferences Centre.
- Legal basis for analytics cookies: Your consent, obtained through the Cookie Preferences Centre.
- Legal basis for performance cookies: Legitimate interests in ensuring the security and reliability of the Service, balanced against your rights.
You have the right to withdraw consent for non-essential cookies at any time without affecting the lawfulness of processing prior to withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your cookie-related rights under GDPR have been violated.
10. Updates to This Cookie Policy
CoMaxy may update this Cookie Policy from time to time to reflect changes in the cookies we use, the third-party services we engage, or applicable legal requirements. We will notify you of material changes by:
- Resetting your cookie consent preferences and presenting the updated cookie banner on your next visit to comaxy.ai
- Sending an email notification to your registered account address for significant changes
The "Last Updated" date at the top of this policy reflects the date of the most recent revision. The version of this Cookie Policy that was in effect at the time of your consent governs that consent.
11. Contact Us
If you have questions or concerns about our use of cookies or this Cookie Policy, please contact:
Privacy Team: privacy@comaxy.ai
Data Protection Officer: dpo@comaxy.ai
Website: https://comaxy.ai/cookies
Kratuva Inc.
Attn: Privacy Team
(Registered address available upon request)
This Cookie Policy was last reviewed and approved by Kratuva Inc. in March 2026.
comaxy.ai | privacy@comaxy.ai | Kratuva Inc., Delaware C-Corp