Cookie Policy

Cookies are small text records a website asks a browser to store and return. Similar local storage may keep short-lived interface state. This Policy applies to browser storage used directly by sendinbox.co; third-party pages and widgets have their own policies.

SendInbox currently uses browser storage only where needed to operate and secure the service:

• Refresh session cookie: an HttpOnly, Secure, SameSite=Lax cookie returns an opaque rotating session token to the refresh endpoint. It is not readable by page scripts and is removed on logout or expiry.
• In-memory access state: the short-lived access token is kept in application memory rather than persistent browser storage.
• Temporary security state: signed or one-time values may be used during invitation, password reset, account verification, Meta onboarding, or checkout flows.

These items are necessary for a service you request and cannot be switched off through a cookie preference panel without preventing secure sign-in or the requested flow.

We do not currently set advertising, retargeting, cross-site profiling, or optional product analytics cookies on sendinbox.co. We therefore do not display a consent banner merely to accept optional trackers. If we add optional cookies, we will update this Policy and obtain a preference before using them where required.

When you deliberately start Meta Embedded Signup or Razorpay Checkout, their hosted page, window, or software may use cookies or similar technologies under Meta’s or Razorpay’s own notices. Those services are opened only for the connection or payment action you request. Blocking their storage may prevent onboarding or checkout from completing.

Browsers let you inspect, block, or delete cookies. Deleting the SendInbox session cookie signs the browser out or requires a fresh sign-in. You can also use the product’s logout and session-revocation controls.

Questions about browser storage may be sent to support@sendinbox.co. See the Privacy Policy for broader data use.