EPRIVACY & GDPR COOKIE DISCLOSURE

Cookie Policy

Effective Date: November 11, 2026 · Contact: privacy@maptoowner.com

1. How MapToOwner Uses Cookies

MapToOwner uses a minimal, privacy-first set of cookies. We separate Strictly Necessary Technical Cookies—required to keep your workspace authenticated over HttpOnly sessions, process Stripe payments securely, and remember your privacy choices—from Optional Analytics Cookies, which remain disabled by default until you explicitly grant consent. We never deploy third-party advertising pixels or cross-site behavioral trackers.

2. Complete Cookie Inventory

Cookie / KeyCategoryRetentionPurpose
sb-*-auth-tokenMapToOwner (Supabase SSR)Strictly NecessarySession / RefreshedHttpOnly, Secure, SameSite=Lax authentication cookie maintaining your signed-in workspace session.
mto_cookie_consentMapToOwnerStrictly Necessary180 daysStores your explicit cookie consent preference (Necessary Only vs. Accept All) so we do not prompt you on every visit.
__stripe_mid / __stripe_sidStripe, Inc.Strictly Necessary (Billing)1 year / 30 minutesSet only during Stripe Checkout or Customer Portal flows for PCI-DSS payment security and card fraud prevention.
Optional DiagnosticsMapToOwnerOptional AnalyticsUp to 180 days (Opt-in only)Aggregated performance telemetry and Core Web Vitals diagnostics. Strictly blocked unless you click Accept All or enable Optional Product Analytics.

Update or Withdraw Your Consent Anytime

Click the button to reopen the Cookie Preferences dialog and switch between Necessary Only and Optional Analytics at any moment.

GDPR & ePrivacy Controls

Choose which cookies MapToOwner may store on your browser. Your selection is retained for 180 days and can be updated anytime from the footer or Cookie Policy.

Strictly Necessary Technical CookiesAlways Active

Required for Supabase SSR authentication (HttpOnly), Stripe Checkout fraud prevention, CSRF/CORS protection, and storing your 180-day privacy preference.