LEGAL

Cookie Policy

Last updated: 7 September 2026

This policy explains the cookies and similar storage technologies that Maprix uses, what each one is for, how long it lasts, and how you can control it. Everything listed here was verified against the running service rather than copied from a template, so the tables describe what actually happens when you visit us.

We use the word “cookie” throughout for readability, but the rules — and this policy — apply equally to anything stored on or read from your device, including browser local storage. The medium does not change the obligation.

Where this policy applies

Maprix runs on two addresses, and they behave differently:

  • maprix.io — our marketing site. This is where you read about the product before signing up.
  • app.maprix.io — the application itself, where you create an account and run scans.

Some preferences are shared across both addresses so that you are not asked the same question twice. Where that is the case, the tables below say so.

How we classify these technologies

We sort every item into one of two groups, and the group determines whether we ask you first:

  • Strictly necessary. Without it, something you asked for does not work — you cannot stay signed in, the payment cannot complete, the bot protection cannot tell you apart from an attacker, or your own scan result cannot be shown back to you. We do not ask for consent for these, because there is no meaningful choice to offer: switching them off switches off the service.
  • Analytics and advertising. These help us understand how the site is used and measure whether our advertising works. They are not necessary for the service to function, and we treat them as requiring your consent.

We assess “strictly necessary” from your point of view, not ours. Something being commercially useful to us does not make it necessary to you.

Choosing your preference

If you visit us from the European Economic Area, the United Kingdom or Switzerland, you are shown a short banner before any analytics or advertising technology is loaded. The banner offers “Necessary only” and “Accept” as equally weighted, single-click options at the first level. There is no close button, because closing a question is not an answer to it.

Until you answer, analytics and advertising signals stay switched off.

Your answer is stored in a cookie (maprix_riza) so that we do not ask again on every page, and so that we can show, if asked, what you chose and when. That record lasts 180 days, after which we ask again.

You can change your answer at any time. Once you have answered, a small “Cookie choice” button stays in the corner of every page. Select it and the banner opens again, with both options as they were the first time. Clearing the maprix_riza cookie in your browser also resets the question.

To decide whether the banner is required, we need to know which country your connection is coming from. We read that from our own network layer rather than sending your address to a separate location service, and we cache the result in a short-lived cookie (maprix_ulke, 12 hours) so that we do not repeat the lookup on every page.

Storage used on maprix.io

NamePurposeTypeHow longSet byNeeds consent
mx_dilRemembers the language you chose, so the site does not switch back on the next pageCookie, first party365 daysMaprixNo — functional preference
maprix_rizaStores your cookie choice and when you made itCookie, first party (shared with the application)180 daysMaprixNo — it is the record of your choice
maprix_ulkeCaches the measured country of your connection, so we know whether the banner is requiredCookie, first party (shared with the application)12 hoursMaprixNo — strictly necessary to operate the choice mechanism
_gaAnalytics — distinguishes one visitor from anotherCookie, first party400 daysOur analytics provider’s script, stored on our domainYes
_ga_QDV07TLX29Analytics — keeps the state of your current visitCookie, first party400 daysOur analytics provider’s script, stored on our domainYes
_gcl_auAdvertising — links a later sign-up back to an advert you sawCookie, first party90 daysOur advertising provider’s script, stored on our domainYes
_gcl_awAdvertising — stores the click identifier when you arrive from an advert. Only written on such an arrivalCookie, first party90 daysOur advertising provider’s script, stored on our domainYes
_gcl_lsAdvertising — the same attribution data, kept in browser local storage rather than a cookieLocal storage, first partyUntil you clear itOur advertising provider’s scriptYes
IDEAdvertising — measurement and retargeting across sitesCookie, third party400 daysOur advertising providerYes
GCL_AW_PAdvertising — click attribution, written only when you arrive from an advertCookie, third party90 daysOur advertising providerYes
_fbpAdvertising — distinguishes your browser so that our social media adverts can be linked to a later visit, sign-up or purchaseCookie, first party90 daysOur social media advertising provider’s script, stored on our domainYes
_fbcAdvertising — stores the click identifier when you arrive from a social media advert. Only written on such an arrivalCookie, first party90 daysOur social media advertising provider’s script, stored on our domainYes

Storage used on app.maprix.io

NamePurposeTypeHow longSet byNeeds consent
Sign-in token (sb-…-auth-token)Keeps you signed in and lets us recognise your account securelyLocal storage, first partyUntil you sign out or clear it; refreshed while you use the serviceMaprixNo — strictly necessary
maprix_dilRemembers the language you choseCookie, first party (shared with the marketing site)365 daysMaprixNo — functional preference
maprix_riza, maprix_ulkeAs described above; shared with the marketing site so you are asked only onceCookie, first party180 days / 12 hoursMaprixNo
Map key (ha_maps_key)Holds the technical key needed to draw the mapLocal storage, first partyUntil you clear itMaprixNo — strictly necessary
Scan cache (ghcache:…)Keeps the result of a scan you ran for 24 hours, so repeating it does not cost you credits againLocal storage, first party24 hoursMaprixNo — strictly necessary to deliver what you asked for. It is never used for analytics or profiling
Recent businesses (maprix_recent_businesses:…)The last few businesses you searched for, so you do not retype themLocal storage, first partyUntil you clear itMaprixNo — a selection you made
Pending-email keys (mx_pending_verify_email, mx_pending_reset_email)Carries your address through the “verify your email” and “reset your password” stepsLocal storage, first partyUntil the step finishes or you clear itMaprixNo — strictly necessary
Human-verification storageRuns the “are you human?” check on the sign-up and password screensCookie and storage inside the verification frame, third partyShort-livedOur security providerNo — strictly necessary for security
_gcl_au, _gcl_lsAdvertising — as described in the table aboveCookie / local storage, first party90 days / until clearedOur advertising provider’s scriptYes
test_cookieAdvertising — checks whether your browser accepts cookies at allCookie, third partyUnder one hourOur advertising providerYes
_fbp, _fbcAdvertising — as described in the table aboveCookie, first party90 daysOur social media advertising provider’s scriptYes

The third-party cookies above are set from our providers’ own domains rather than ours. You can see exactly which domain set which cookie in your browser’s cookie viewer, where they are listed per site.

Conversion notifications sent from our server

If you have allowed advertising measurement (or, in countries where no choice banner is shown, by default), at three moments — when you create an account, when you start checkout and when your payment completes — our server also reports that event to our social media advertising provider, alongside your browser. This lets the event be counted once, even when an ad blocker stops the browser report.

In that report your email address and account ID are sent only in irreversibly hashed form (SHA-256), together with your IP address, browser details, the values of the _fbp/_fbc cookies above and, for a payment, the amount and currency. Your plain email address is never sent. If you chose “Necessary only”, no such report is made.

Things that are loaded but store nothing

Some third-party resources are requested by your browser without writing anything to your device. They still receive your IP address, because that is how the internet works, so we list them for completeness:

  • Web fonts, loaded from a font hosting service so that the site renders in the intended typeface.
  • Map tiles and map scripts, loaded so that the map can be drawn.
  • A measurement beacon from our infrastructure provider, which reports page performance without setting a cookie or identifying you.

If you would rather not have your address disclosed to these services at all, the only reliable control is at the network or browser level; blocking them will degrade or break parts of the service.

Controlling cookies yourself

Independently of the banner, you can:

  • Delete cookies and clear site data for maprix.io and app.maprix.io in your browser settings. This clears your stored choice as well, so the banner will ask again.
  • Block third-party cookies entirely in your browser. The service will still work; advertising measurement will not.
  • Use your browser’s private or incognito mode, which discards everything when the window closes.

Blocking strictly necessary storage will stop you being able to sign in, run scans, or complete a payment. That is not a restriction we impose; it is what those items are for.

Changes to this policy

We update this policy whenever the set of technologies we use changes. The current version is always published on this page and the “Last updated” date at the top reflects the most recent change.

Contact

Questions about anything on this page: info@maprix.io.