Cookie Policy
Effective Date: November 05, 2026 • Published by Cyphex Agency (cyphex.agency)
Strict Privacy First: Zero Third-Party Advertising Cookies
Cyphex Mail is a professional business tool developed and operated by Cyphex Agency (cyphex.agency). We do NOT use third-party advertising cookies, cross-site profiling trackers, or invasive data broker scripts. We only store strictly necessary cookies required to authenticate your login sessions and secure your webmail.
1. Strictly Necessary Cookies
These cookies are indispensable for user authentication, security verification, and session state across Cyphex Mail:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| accessToken | Signed session token to authorize API and webmail requests | Session (15 min) | Essential / HTTP-Only |
| refreshToken | Secure rotating token to refresh expired sessions securely | 30 Days | Essential / HTTP-Only |
| oauth_state | Cryptographic state token to prevent CSRF spoofing during Google OAuth login | 10 Minutes | Essential / Secure |
| trusted_device | Hardware device fingerprint to remember verified 2FA authentication | 30 Days | Security / Functional |
2. What We Never Do
- Zero Third-Party Advertising: No Facebook Pixel, Google AdSense, TikTok, or retargeting network trackers.
- Zero Profile Reselling: We never harvest browsing telemetry to sell or share with commercial brokers.
- Zero Model Training: Your private mailbox telemetry is never used to train generalized artificial intelligence models.
3. How to Manage Cookies
You can block or clear cookies through your browser settings at any time. However, because our cookies are strictly essential for user authentication and session security, blocking them will prevent you from logging into your Cyphex Mail account or webmail.