The short version: Mail-Organiser uses only strictly necessary session storage to keep you authenticated. We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party cookies for non-essential purposes.
Cookies are small text files that are placed on your device by websites and applications you visit. They are widely used to make websites work, or work more efficiently, and to provide information to the owners of the site. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (stored on your device for a set period).
Mail-Organiser operates primarily as a Microsoft Outlook add-in (task pane) rather than a traditional website. Most of our authentication state is managed through the browser's sessionStorage API — which operates similarly to session cookies but is isolated per tab/session and is automatically cleared when the session ends.
Mail-Organiser uses sessionStorage (not persistent cookies) to store:
mo_jwt): A JSON Web Token used to authenticate your API requests. This token is short-lived (typically expires within 24 hours) and is cleared when you sign out or close the task pane session.mo_user): A small JSON object containing your name and email address, used to personalise the interface without requiring an additional API call on each screen load.Neither of these storage items is accessible from other browser tabs or other websites. They contain no tracking information and are used solely to maintain your authenticated session.
| Name | Type | Category | Expiry | Purpose |
|---|---|---|---|---|
mo_jwt |
sessionStorage | Strictly Necessary | Session end or 24h | Authenticates API requests. Contains a signed JWT issued by Mail-Organiser. |
mo_user |
sessionStorage | Strictly Necessary | Session end | Stores basic profile info (name, email) to personalise the interface. |
Mail-Organiser does not use:
When you visit our public web pages (landing page, pricing page, etc.), the following limited third-party services may be used:
display=swap parameter which minimises the tracking surface. To avoid this, you can use a browser extension that blocks Google Fonts.__cf_bm) for bot detection purposes. This is a strictly necessary security cookie and cannot be disabled without breaking the service.Neither Google Fonts nor Cloudflare has access to your Mail-Organiser email or account data.
Because Mail-Organiser uses only strictly necessary session storage, there is no cookie preference centre — we don't have optional or marketing cookies to turn off.
You can clear your sessionStorage at any time by:
You can also configure your browser to block all cookies and local storage, but this will prevent Mail-Organiser from functioning.
Mail-Organiser respects the Do Not Track (DNT) browser setting. As we do not engage in cross-site tracking regardless, no additional behaviour change is required when DNT is enabled.
The use of cookies and similar technologies in the UK is regulated by the Privacy and Electronic Communications Regulations 2003 (PECR) alongside UK GDPR. Because Mail-Organiser uses only strictly necessary storage (required for the service to function), we are not required to obtain consent for this use under Regulation 6(4) of PECR.
We do not serve the Mail-Organiser task pane to non-authenticated users in a way that would require a cookie consent banner.
If we introduce new cookies or storage mechanisms in the future — for example, analytics or optional personalisation — we will update this policy and, where required by law, obtain your consent before setting those cookies.
If you have questions about our use of cookies or storage, please contact us at privacy@mail-organiser.com.