Cookies

Last updated: 5 October 2026

PlainMailOS uses only cookies that are needed for the Service to work. We don't use advertising, tracking or analytics cookies, so there is nothing to opt out of.

session

Keeps you signed in. Lasts: 30 days, or until you sign out.

google_oauth_state, sso_oidc_oauth_state

Protects a sign-in with Google or with your company's single sign-on against forgery. Lasts: 10 minutes.

gmail_mailbox_oauth_state, microsoft_mailbox_oauth_state, microsoft_admin_consent_oauth_state (and the matching _upgrade_ cookies)

Protects connecting a mailbox, or a company-wide approval, against forgery. Lasts: 10 minutes.

Paddle cookies

Set by Paddle, our payment processor, while you use checkout or manage billing, to process payments and prevent fraud. Lasts: See Paddle's cookie policy.

Browser storage

The app stores when you last opened the dashboard in your browser's local storage, so it can show what's new since then. It never leaves your browser.