Cookies Policy
Effective date: 25 March 2026
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site function correctly, remember your preferences, and understand how you use the service.
Cookies We Use
Essential cookies. Required for the Service to function. These maintain your authentication session, remember your active Workspace, and handle security tokens. You cannot disable these without breaking core functionality.
| Cookie | Purpose | Duration |
|---|---|---|
| mask_session | Authentication session | Session |
| mask_workspace | Active workspace selection | 30 days |
| mask_theme | Dark/light mode preference | 1 year |
Analytics cookies. First-party cookies that help us understand how registered users interact with the platform. These do not track you across third-party websites.
Security (reCAPTCHA) cookies. When bot protection is enabled, our public forms load Google reCAPTCHA, which sets its own cookie and may store data in your browser to tell humans from automated abuse. See the section below for details.
Advertising and marketing cookies. We do not currently use advertising cookies or behavioral tracking cookies, and we do not currently participate in ad networks. Apart from Google reCAPTCHA (used for security on our forms), we do not currently load third-party cookies for marketing or cross-site tracking.
Operator-configured analytics and marketing scripts. The platform supports site-wide analytics and marketing tags that a MASK administrator can turn on, including Google Analytics, Google Ads, the Meta Pixel, an X (Twitter) pixel, and custom scripts. If any are enabled, they can set their own cookies, may involve cross-site tracking, and send data to the provider concerned under that provider's own terms. Where any such tag is in use, it is disclosed in this policy and on our Subprocessors page.
Google reCAPTCHA
To protect our public forms from spam and automated abuse, MASK uses Google reCAPTCHA on pages such as sign-up, login, magic-link, contact, enterprise contact, and founding-creators forms. This feature is enabled at our discretion and may not be active on every form at all times.
When reCAPTCHA is active, it loads a script from Google, sets a third-party cookie (for example _GRECAPTCHA), and sends your IP address and interaction signals to Google to generate an abuse score. This processing is carried out by Google and is subject to Google's Privacy Policy and Terms of Service. reCAPTCHA is listed on our Subprocessors page.
Link and Page Analytics
When visitors click your short links, visit your Bio Pages, or scan your QR codes, we collect analytics data (device type, browser, approximate location, referral source). This collection does not use cookies on the visitor's device. It is based on request metadata at the time of the interaction.
Local Storage
In addition to cookies, we use browser local storage for client-side preferences such as dismissed notifications, onboarding progress, and UI state. Local storage data stays on your device and is not transmitted to our servers.
Managing Cookies
You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from using the Service.
For detailed instructions on managing cookies in your browser, consult your browser's help documentation.
Changes
We may update this Cookies Policy as the platform evolves. Material changes will be reflected with an updated effective date. For questions, contact privacy@mask.pk.