Cookies and Tracking Notice

01Account cookies and preferences

maryalabs.io uses essential session and OAuth security cookies when you sign in to your Marya Labs account. Session cookies keep you signed in for up to 30 days, with renewal while you use your account; OAuth state cookies are short-lived. Production account cookies use HTTPS and HttpOnly protection.

The portal saves your light or dark appearance selection in browser local storage when you press the appearance control. It does not store authentication tokens there. Public pages do not set tracking or advertising cookies.

You can inspect account cookies and the selected appearance value in your browser’s storage settings. Signing out revokes your current account session.

02We do not run analytics or trackers

• No Google Analytics, Plausible, Fathom, PostHog, Mixpanel, or any other analytics product.
• No advertising or conversion pixels — no Meta, Google Ads, TikTok, or similar.
• No session recording or heatmapping.
• No embedded social media widgets that would report your visit back to a platform.
• No content delivery networks loading assets from third-party domains.

Fonts are self-hosted. They are downloaded from Google Fonts when we build the site and then served from our own server, so your browser never contacts Google when you visit.

We do not know how many people read any given page, how long they stay, or where they came from. This is a real trade-off we accept, not something we are pretending is free.

03What does happen

The server records account, billing, security, and download events needed to provide these services. The Privacy Policy describes the data involved.

When you download software

We record the product and file, the platform, a pseudonymised hash of your IP address, your browser’s user-agent string, the page that referred you, and the time. We do this to count installs and to stop automated abuse of our bandwidth.

When you submit a form

Subscribing, applying for the beta, and contacting support all record what you submitted, plus a pseudonymised IP hash and user-agent used for rate limiting. Repeated submissions from the same source in a short window are blocked.

Ordinary server logs

Our hosting provider keeps standard web server logs, as every web server does. These are used for diagnosing faults and are not used to build any profile of you.

The IP hash is salted, which makes it pseudonymised rather than anonymous. That distinction and the reasoning behind it are set out in the Privacy Policy.

04The software

DAWN and MeterStack use no website cookies. Integration with the Marya Labs account and entitlement APIs is deferred for the existing app builds; a future integrated build will retrieve account access and usage balances when you sign in. This portal change does not add app analytics.

DAWN does send data to the AI provider you connect, including screenshots when Mac control is active. That has nothing to do with cookies but is by far the more significant flow, so it is worth reading that section of the Privacy Policy.

05If this ever changes

If we introduce analytics or anything that stores information on your device for a non-essential purpose, we will implement a proper consent mechanism first, ask before setting anything, and update this page.

We will not quietly add a tracker and revise this text afterwards.

If you find something on this site that contradicts this page, please tell us at support@maryalabs.io — that would be a bug, and we would want to fix it.