1. Introduction
MemorySync uses a small, deliberate set of cookies. We do not run advertising trackers, we do not sell information to third parties, and we do not use cookies to build user profiles for marketing purposes.
MemorySync provides an analytics-cookie choice on its public marketing site. Optional analytics do not load unless a visitor selects “Accept all” or enables Analytics and saves their preferences. Selecting “Reject all” or saving with Analytics disabled keeps optional analytics off. The saved choice can be reviewed through the “Cookie settings” control in the public-site footer.
3. Categories of Cookies We Use
We group the cookies on our surfaces into four categories. Each category is described in more detail in the sections that follow.
- Essential cookies — required for the website and dashboard to function. These cannot be disabled without breaking the Services.
- Authentication & session cookies — keep you signed in to the dashboard and protect requests against common web attacks.
- Preference cookies — remember choices you make so the interface behaves consistently across visits.
- Analytics cookies — help us understand how the website and dashboard are used in aggregate so we can improve them.
4. Essential Cookies
Essential cookies are strictly necessary for the Services to work. They handle things like routing, basic page rendering, load-balancing, and ensuring that requests originate from the expected browser.
These cookies do not require your consent under most legal frameworks because the Services cannot function without them. They do not track you across other sites and do not collect information beyond what is needed to deliver the page you requested.
5. Authentication & Session Cookies
When you sign in to the dashboard, we issue a small number of cookies that keep your session secure. The most important ones are:
| Name | Purpose | Lifetime |
|---|---|---|
ms_at | Short-lived access token used to authenticate your session with our APIs. | Up to 15 minutes |
__Host-ms_rt | Refresh token used to renew your session when the access token expires. Marked HttpOnly and Secure; never readable to client-side JavaScript. | Up to 14 days |
ms_csrf | Cross-site request forgery token used to verify that state-changing dashboard requests originate from a real browser session. | Browser session |
We may also issue short-lived cookies during single sign-on flows and OAuth authorization to protect against replay and forgery. These cookies expire automatically once the flow completes.
6. Preference Cookies
Preference cookies remember low-stakes choices that make the interface feel consistent — for example, the workspace or project you last viewed, the density setting for certain views, and your theme preference where applicable.
We store most preferences in browser storage rather than cookies, which means they remain on your device and are not transmitted to us. You can clear these preferences at any time using your browser's site-data controls.
7. Analytics Cookies
On the public marketing site, optional analytics providers are loaded only after a visitor selects “Accept all” or enables Analytics and saves their preferences. Until then, and after “Reject all” or a saved disabled choice, optional analytics are not loaded.
Analytics tooling on our surfaces is configured to collect minimal information, to avoid collecting customer content, and to operate on aggregated or de-identified data wherever possible. We do not use analytics to advertise to you.
The analytics choice applies only to the public marketing host. The Docs host does not load optional marketing-site analytics.
8. Third-Party Cookies
We use a limited number of trusted third parties to operate the Services — for example, payment processing, error monitoring, and email delivery. Some of these providers may set cookies on their own domains when you interact with their components (for example, when entering payment details on a hosted checkout page).
Those cookies are governed by the third party's own cookie and privacy policies. We select providers carefully and configure them to keep the cookies they use to a minimum.
9. Managing Cookies
The consent choice is stored in your browser for up to six months so the public site can remember it. After that period, the saved choice expires and the site asks you to choose again. You may be asked sooner if browser site data is cleared or the consent categories materially change. You can reopen the choice at any time with the “Cookie settings” control in the public-site footer. Choosing “Reject all” or saving with Analytics disabled stops future optional analytics loading and removes first-party analytics cookies that the site can access.
Browser-level site-data controls remain available in addition to this preference and can remove cookies previously placed by third parties on their own domains.
10. Browser Controls
All major browsers allow you to view, restrict, and delete cookies for any site. You can also configure your browser to block cookies from third parties or to clear all cookies when the browser closes.
- Disabling essential cookies will break key Services features such as signing in, staying signed in, and submitting forms.
- Disabling preference cookies will not break the Services but may cause the interface to forget your choices between visits.
- Disabling analytics cookies has no impact on the Services beyond reducing the data we use to improve them.
For instructions on managing cookies in popular browsers, consult your browser's help pages — keywords such as “cookies” or “site data” will normally surface the relevant settings.
11. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in the technologies we use, in the Services, or in the relevant legal requirements. The “Last Updated” date above shows when this version took effect.
12. Contact Us
Questions about this Cookie Policy can be sent to privacy@memorysync.io. For broader questions about how we handle personal information, please refer to our Privacy Policy.
Related documents
© 2026 MemorySync. Please refer to this page for the latest version of this policy.