> ## Documentation Index
> Fetch the complete documentation index at: https://help.maestra.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Cookies and Browser Storage

Maestra Platform uses cookies to recognize a visitor's device from one visit to the next. That way, page views, cart activity, and form submissions are tied to the right customer profile and can power personalization.

## Summary

* Maestra Platform cookies hold an anonymous device identifier or technical markers. They contain no names, email addresses, phone numbers, or other contact details.
* Records about pop-up views, closes, and submissions live in the browser's local storage, not in cookies — so they aren't sent to the server with every request.

## Main cookies

| Cookie | Set on | Lifetime | Purpose |
| - | - | - | - |
| `maestraDeviceUUID` | Your website (top-level domain, first-party) | Up to 400 days (the browser limit), renewed on each visit | Anonymous device identifier ([DeviceUUID](/api-integrations/what-is-a-deviceuuid)). Links on-site activity on this device to the customer profile in Maestra Platform. |
| `deviceUUID` | Maestra tracking API domain (e.g., `api.maestra.io`), third-party | Up to 400 days, renewed on each visit | Server-side copy of the device identifier. `HttpOnly` and `Secure`. Browsers that block third-party cookies (Safari, Firefox) don't keep it — tracking keeps working through the first-party cookie. |
| `popmechanic_sbjs_migrations` | Your website (first-party) | 6 months, renewed when the pop-up script loads | Technical marker the pop-up and forms script uses for traffic-source tracking. Set when the site has at least one Maestra Platform pop-up or form. Contains no personal data. |
| `_qz_sess` | Your website (first-party) | 24 hours, renewed on each display | Session ID for a product-finder quiz. Only set when such a quiz is shown. |

<div className="accordion-muted">
  <Accordion title="Legacy cookies">
    | Cookie | Set on | Lifetime | Purpose |
    | - | - | - | - |
    | `mindboxDeviceUUID` | Your website (first-party) | Up to 400 days, renewed on each visit | The same device identifier under its legacy name. Only present on sites that use the older tracker setup; otherwise it isn't set. |
    | `directCrm-session` | Your website (first-party) | Up to 400 days (set for 2 years; browsers cap it at 400 days) | Legacy copy of the device identifier, kept for compatibility with older integrations. |
  </Accordion>
</div>

<Note>
  The tracker requests a longer expiry for the identifier cookies, but modern browsers (Chrome and others) cap any cookie at 400 days. In practice, the cookie lives up to about 13 months after the visitor's last visit.
</Note>

## Temporary technical cookies

The tracker also sets two cookies that are deleted immediately — in under a second:

| Cookie | Purpose |
| - | - |
| `domaintest` | Checks which top-level domain cookies can be set on. |
| `testcookie` | Checks that cookies are enabled in older browsers. |

## Other data stored in the browser (not cookies)

To decide when and to whom to show pop-ups, Maestra Platform also keeps some data in the browser's local storage, session storage, and IndexedDB. This data stays on the device and isn't sent with every request.

| Storage | What it holds | Lifetime |
| - | - | - |
| localStorage: `maestraDeviceUUID` / `mindboxDeviceUUID` | Backup copy of the device identifier | Until cleared |
| localStorage: `maestra_cart` | Cart contents for the Shopify integration | Until cleared |
| localStorage: keys starting with `popmechanic.` | Pop-up display rules: when a pop-up was last shown, closed, or submitted; A/B test variant; recently viewed pages; segment check cache | Until cleared |
| localStorage: keys starting with `popmechanic_sbjs_` | Traffic source of the first and current visit (source, channel, UTM campaign, referrer, number of visits) | 6 months; session data 30 minutes |
| sessionStorage: `popmechanic.session-start`, `popmechanic.la` | Session start and last activity time (for "time on site" and "inactivity" rules) | Until the tab is closed |
| IndexedDB: `popmechanic.db` | History of pop-up events and viewed pages, used for targeting (e.g., "viewed product X") | 6 months; older records are removed daily |

## For your cookie banner

If your site uses a consent tool, list the cookies above under the category that matches your privacy policy. Maestra Platform cookies are used for customer recognition, analytics, and on-site personalization.

Classifying them is your call as the site owner — check with your legal team.

## How to check on your own site

Open your website and use your browser's developer tools to see these records for your domain.

<Tabs>
  <Tab title="Chrome">
    Go to **DevTools → Application → Cookies** (and **Local Storage** / **IndexedDB**).
  </Tab>

  <Tab title="Safari">
    1. Turn on developer tools: **Safari → Settings → Advanced**, then tick **Show features for web developers**.
    2. Go to **Develop → Show Web Inspector → Storage**.
    3. Check **Cookies** (and **Local Storage** / **Indexed Databases**).
  </Tab>
</Tabs>

<Note>
  Questions? Contact your Maestra Platform Forward Deployed Marketer.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.