Privacy
Cookies & Local Storage
Essential storage saves your work, secures optional sign-in and connects a purchase to this browser. Google Analytics and Meta marketing cookies remain off unless you separately accept the relevant choice.
Effective and last updated: 24 August 2026
Storage used by Mapicito
| Name | Type and purpose | Retention |
|---|---|---|
mapicito_session | Essential secure, HttpOnly, SameSite=Lax cookie for an optional signed-in account session. | Up to 30 days, or until you sign out. |
mapicito_buyer | Essential secure, HttpOnly, SameSite=Lax cookie connecting a guest purchase, payment verification and download access to this browser. | Up to 365 days. |
mapicito-local | IndexedDB database containing local projects, the last-opened project reference and recovery copies for malformed local records. | Until you delete the projects or clear Mapicito's site data. |
mapicito:privacy:consent | Versioned local-storage record containing separate Analytics and Marketing choices and the update time. It controls whether the related optional provider may load; it is not itself a visitor identifier. | Until you change a choice, clear site data or the consent version changes. |
_ga_ga_* | Optional first-party Google Analytics cookies used to distinguish consenting visits and sessions. They may be created or read only after you accept Analytics; Google Signals and advertising features remain disabled. | Up to 90 days. |
_fbp_fbc | Optional first-party Meta advertising cookies used for browser and Facebook/Instagram ad attribution. They may be created or read only after you accept Marketing; _fbc applies where an eligible Facebook click identifier is present. | Normally up to 90 days, controlled by Meta. |
mapicito:project-navigation:v1mapicito:checkout-project-return:v1 | Essential per-tab handoff records containing only a version, local project identifier, public editor route and expiry time. They open the exact saved map without putting its identifier in a URL and reconnect the same map after Stripe. | Ordinary navigation expires within 5 minutes. A checkout return handoff expires within 48 hours and is removed after use. |
mapicito:checkout:print_export_credit:EUROPEmapicito:checkout:print_export_credit:EUROPE:attempt-bindingmapicito:checkout:print_export_credit:EUROPE:bindingmapicito:checkout-session:cs_…:bindingmapicito:checkout:print_export_credit:USAmapicito:checkout:print_export_credit:USA:attempt-bindingmapicito:checkout:print_export_credit:USA:binding | Session-storage checkout attempt identifiers, session-specific return bindings and the last confirmed non-personal exact-export selection. They keep parallel Stripe returns separate, prevent duplicate Checkout sessions and reconnect a verified purchase to its selected design revision, size and format. | In-flight attempt data is cleared after Checkout. A confirmed exact-file selection remains until that file downloads or the browser's page session ends. |
The essential cookies are created only when the related account or guest-purchase feature is used. In production they are sent only over HTTPS and cannot be read by browser scripts. Google Analytics and Meta cookies are optional and are used only after the corresponding consent.
Payment, production and optional measurement providers
When you choose to pay, Stripe Checkout is opened and Stripe may use strictly necessary storage to prevent fraud and process the payment. A printed order is then fulfilled through Printify. If you accept Analytics, Google may set or read limited analytics cookies and receive sanitized public page views. If you accept Marketing, Meta Platforms Ireland Limited may set or read advertising cookies and receive limited Pixel events. Their own notices apply on their services; Mapicito enables each optional provider only for the stated purpose and choice.
Cookieless product analytics
Mapicito measures a small allowlist of creation and purchase-flow events through a first-party server endpoint. It does not set or read analytics cookies, local storage or a visitor identifier, and the event record excludes personal text, names, contact and delivery details, account, project and session identifiers, and full IP addresses. Global Privacy Control or Do Not Track prevents browser events from being sent. See the Privacy Policy for event categories, purpose, legal basis, retention and your rights.
Optional Google Analytics measurement
Mapicito uses Google Analytics 4 in Basic Consent Mode. The Google tag is not requested and no Google Analytics request is sent before you select Accept Analytics. After acceptance, Mapicito sends only manually emitted, sanitized page_view events for allowlisted public URLs and bounded campaign parameters; private routes and unknown query values stay out. Google Signals, advertising storage, advertising user data and advertising personalization remain disabled. Global Privacy Control or Do Not Track keeps Google Analytics off even if an earlier record says accepted. GA4 user- and event-level property retention is set to two months.
Optional Meta marketing measurement
Meta Pixel is not requested and Meta marketing cookies are not permitted before you select Accept Marketing. After acceptance, Mapicito sends only PageView, ViewContent, CustomizeProduct, AddToCart and InitiateCheckout with limited product parameters. It does not send custom map text, contact or delivery details, or private project and Checkout identifiers. A browser Purchase event is not generated. Meta may combine received data with information it already holds under its own privacy notice.
Your choices
You can separately accept, reject or later withdraw optional Analytics and Marketing through the persistent Privacy choices control. Rejection does not affect Mapicito features. Withdrawal disables the related provider and removes its first-party measurement cookies where the browser permits. Global Privacy Control or Do Not Track keeps both optional categories disabled even if an earlier record says accepted. You can also block or clear storage in your browser; doing so can remove unsynced projects, sign you out, break checkout return verification or prevent recovery of a purchased download.
Changes and questions
This notice is updated if the storage model changes. Questions can be sent to info@mapicito.com.