Cookies Policy
Effective date: 25 March 2026
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site function correctly, remember your preferences, and understand how you use the service.
Cookies We Use
Essential cookies. Required for the Service to function. These maintain your authentication session, remember your active Workspace, and handle security tokens. You cannot disable these without breaking core functionality.
| Cookie | Purpose | Duration |
|---|---|---|
| mask_session | Authentication session | Session |
| mask_workspace | Active workspace selection | 30 days |
| mask_theme | Dark/light mode preference | 1 year |
Analytics cookies. First-party cookies that help us understand how registered users interact with the platform. These do not track you across third-party websites.
Security (reCAPTCHA) cookies. When bot protection is enabled, our public forms load Google reCAPTCHA, which sets its own cookie and may store data in your browser to tell humans from automated abuse. See the section below for details.
No advertising cookies. We do not use advertising cookies, behavioral tracking cookies, or participate in ad networks. Apart from Google reCAPTCHA (used for security on our forms), we do not load third-party cookies for marketing or cross-site tracking.
Google reCAPTCHA
To protect our public forms from spam and automated abuse, MASK uses Google reCAPTCHA on pages such as sign-up, login, magic-link, contact, enterprise contact, and founding-creators forms. This feature is enabled at our discretion and may not be active on every form at all times.
When reCAPTCHA is active, it loads a script from Google, sets a third-party cookie (for example _GRECAPTCHA), and sends your IP address and interaction signals to Google to generate an abuse score. This processing is carried out by Google and is subject to Google's Privacy Policy and Terms of Service. reCAPTCHA is listed on our Subprocessors page.
Link and Page Analytics
When visitors click your short links, visit your Bio Pages, or scan your QR codes, we collect analytics data (device type, browser, approximate location, referral source). This collection does not use cookies on the visitor's device. It is based on request metadata at the time of the interaction.
Local Storage
In addition to cookies, we use browser local storage for client-side preferences such as dismissed notifications, onboarding progress, and UI state. Local storage data stays on your device and is not transmitted to our servers.
Managing Cookies
You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from using the Service.
For detailed instructions on managing cookies in your browser, consult your browser's help documentation.
Changes
We may update this Cookies Policy as the platform evolves. Material changes will be reflected with an updated effective date. For questions, contact privacy@mask.pk.