Cookies and local storage
Maxx uses only the cookies it needs to sign you in and keep you safe. No advertising or analytics cookies.
The short version
Maxx sets cookies that are strictly necessary to run the service and a few settings stored in your browser. Because they are necessary or are choices you made, we do not show a consent banner. We use no advertising, cross-site tracking or analytics cookies.
What is stored
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| maxx_session (or __Host-maxx_session on HTTPS) | Cookie, HttpOnly | Keeps you signed in. Not readable by page scripts | Until you sign out, or the session expires (idle and absolute limits) |
| Trusted device cookie | Cookie, HttpOnly | Remembers a device you chose to trust, so two-step verification is not asked every time | Up to the trusted-device period you saw when you chose it |
| Sign-in state cookie | Cookie, HttpOnly | Protects a sign-in with Google, Apple, Microsoft or GitHub from forgery | Minutes, removed when sign-in ends |
| maxx-theme | Local storage | Remembers light or dark mode | Until you clear it |
| maxx-motion | Local storage | Remembers that you paused animations | Until you clear it |
| Cloudflare Turnstile | Third-party, only if enabled | Bot check on sign-up and sign-in forms | Set by Cloudflare under its policy |
Your control
You can block or delete cookies in your browser, but signing in will not work without the session cookie. Clearing local storage resets your theme and motion choices.
When you pay, PayPal’s own window sets its own cookies under PayPal’s policies. Maxx does not control those.