Cookie Policy

This policy explains how Notiva Mail uses cookies and similar browser storage. A cookie is a small value stored by your browser and returned to the service with later requests. Local storage remains in your browser until it is removed.

Our current use is limited to essential account security and a theme preference. We do not ask you to accept optional tracking because the application does not currently use it.

After you sign in, an essential session cookie keeps your authenticated browser requests connected to the correct server-side session. It also supports security controls such as login state and session regeneration. The configured cookie name can vary by deployment.

The XSRF-TOKEN cookie supports protection against forged state-changing requests. Frontend requests can return this value in the corresponding request header so the service can verify that the request originated from the active browser session.

These cookies are required for secure account and dashboard functions. Public documentation and legal pages remain available without signing in.

Notiva Mail stores your light, dark, or system theme preference in browser local storage under `centipid-mail-theme`. This prevents the interface from changing theme between page loads. The value describes only the selected display mode and is not used to identify or track you.

We do not use analytics cookies and we do not use advertising cookies. We do not currently place third-party marketing pixels, cross-site behavioral identifiers, or social-media tracking cookies in the application.

If that behavior changes, we will update this policy before optional tracking is introduced and provide any choice or notice required for that use.

You can remove cookies or local storage through your browser settings. Blocking the session or CSRF cookie can prevent sign-in, forms, and other authenticated actions from working. Removing the theme preference resets the interface to the system setting.

Signing out invalidates the authenticated session on the service. Your browser may retain an expired cookie value until it is cleared or replaced.