InboxCookie Policy
Last updated: 28 September 2026
This page explains which cookies and similar technologies InboxValid uses, why, and how you control them. It forms part of our Privacy Policy.
1. What cookies are
A cookie is a small text file a website stores in your browser. We also use browser storage (localStorage), which works the same way but is never sent back to a server. Below, "cookie" covers both.
2. Necessary cookies
These are required to sign you in, keep your account secure and remember settings you chose. They do not need your consent and cannot be switched off without breaking the Service.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
__session | Our authentication provider (Clerk) | A short-lived signed token that proves you are signed in, refreshed every minute while you use the app. | 60 seconds, renewed while signed in |
__client_uat | Our authentication provider (Clerk) | When your sign-in state last changed, so the app knows when to refresh the token above. | While signed in |
__client | Our authentication provider (Clerk), on its own subdomain | The long-lived credential that issues the short-lived token. HttpOnly, never readable by page scripts. | Until you sign out or the session expires |
__clerk_handshake | Our authentication provider (Clerk) | Set briefly while an expired token is refreshed through a redirect. | Minutes |
iv_consent | InboxValid | Records the choice you made in the cookie banner so we do not ask again. | 12 months |
iv_ref | InboxValid | The partner link that brought you here, so they are credited if you sign up. Set only when you follow a partner's link. | 60 days by default |
iv_theme, iv_rail (browser storage) | InboxValid | Your light or dark theme and sidebar preference. Stored in localStorage, never sent to us. | Until you clear it |
3. Traffic analytics
We use Google Analytics to count visits and page views across the site. It is loaded for every visitor on every page, whatever you choose in the cookie banner, and the banner does not switch it off. You can block it with your browser's cookie settings or Google's Analytics opt-out add-on.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_<id> | Google Analytics, our traffic analytics provider | A random ID for your browser and the current visit, so visits and page views can be counted per visitor and per session. | Up to 2 years |
4. Analytics and marketing cookies
These are only set if you allow them in the cookie banner. If we add a tool, we will list it here, update this page, and ask for your consent again.
- Analytics: measures which pages are used and how the product performs, so we can improve it. We use PostHog for this; it is not loaded until you allow analytics, and withdrawing consent stops it.
- Marketing: lets advertising partners measure the campaigns that brought you here. As of the date above we do not load any marketing tool.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
ph_<project>_posthog (cookie and browser storage) | PostHog, our product analytics provider | A random ID for your browser and the current visit, so page views and clicks can be counted per visitor and per session. | 12 months |
__ph_opt_in_out_<project> (browser storage) | PostHog | Remembers that you withdrew analytics consent, so nothing is sent after you do. | Until you clear it |
5. Payments
When you pay, the checkout is served by Razorpay inside our billing page. Razorpay sets its own cookies for fraud prevention and to complete the payment; they are necessary for that transaction and are governed by Razorpay's privacy policy. They are not loaded on any other page.
6. Changing your choice
You can change or withdraw your consent at any time. Open the panel below or use the "Cookie settings" link in the footer of every public page. You can also delete cookies through your browser settings; deleting iv_consent makes the banner ask again.
7. Contact
Questions about cookies or your data? Email privacy@inboxvalid.com. Your rights over your personal data are set out in the Privacy Policy.