Cookies Policy
Last updated: 6 May 2026.
Short version: this site uses two strictly-necessary cookies and zero tracking cookies. No analytics, no advertising, no Facebook / Google / TikTok pixels, no heatmap tools, no chat widget, no consent banner needed.
Cookies we set
| Name |
Purpose |
Lifetime |
Category |
XSRF-TOKEN |
Anti-CSRF token issued by Laravel. Prevents cross-site request forgery on internal forms (currently only the contact form, future: any form). |
2 hours |
Strictly necessary |
acellemail-session |
Opaque session identifier. Carries the CSRF token and any temporary state across requests. |
2 hours |
Strictly necessary |
Both cookies are scoped to acellemail.com, marked Secure + HttpOnly + SameSite=Lax, and contain no personal data — they're random bytes used only as opaque identifiers. Under GDPR Article 6(1)(b) / Recital 30, strictly-necessary cookies do not require consent and we do not show a cookie banner for them.
Cookies we do NOT set
We have made an explicit decision NOT to deploy any of the following on this site:
- Google Analytics / Google Tag Manager
- Plausible, Fathom, Matomo, or any other analytics tool
- Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, or any advertising pixel
- Hotjar, FullStory, Microsoft Clarity, or any session-replay tool
- Intercom, Drift, Crisp, or any embedded chat widget
- A/B testing tools that set cookies (Optimizely, VWO, etc.)
- Cookie consent management platforms (since we have no cookies that need consent)
We may add lightweight, privacy-respecting analytics (e.g. server-side log aggregation or a self-hosted Plausible instance) in the future. If we do, this page will be updated and — only if the new tool sets a cookie — a consent mechanism will be added.
Third-party cookies via embedded content
The home page embeds three product walkthrough videos hosted on YouTube's privacy-enhanced no-cookie domain (youtube-nocookie.com). These embeds do not set cookies until you click play. If you do click play, YouTube may set its own cookies in your browser — those are governed by Google's privacy policy, not ours.
Self-hosted fonts: as of 6 May 2026 we ship our fonts directly from acellemail.com and no longer load Google Fonts. Earlier visits may have triggered a request to fonts.googleapis.com / fonts.gstatic.com — Google does not set cookies on these domains, but the request did include your IP. That is no longer the case.
How to refuse / delete cookies
Both Laravel cookies are scoped to a single browsing session and self-expire after 2 hours. To refuse them entirely, configure your browser to block first-party cookies for acellemail.com. The site will still render fine — only future form submissions would fail (currently there are no required forms).
To delete the cookies immediately: open your browser's site-data settings and clear acellemail.com cookies.
Updates
Material changes to this policy will be reflected in the "Last updated" date at the top. The full revision history is publicly viewable in the project's git repository.
Contact
Cookies questions: support@acellemail.com. See also our privacy policy.
