Cookie and consent policy

No advertising or audience cookies

Outreach does not currently load advertising or audience-measurement scripts. If that changes, optional scripts will remain blocked until an informed, affirmative choice is recorded, with rejection as easy as acceptance.

Strictly necessary storage

• Supabase authentication cookies keep the user signed in and refresh the secure session.
• A short-lived OAuth state cookie protects Google or Microsoft mailbox connection from cross-site request forgery; it expires after ten minutes.
• Security cookies may be used to prevent abuse and preserve a requested session.

These items are necessary for the requested service and are not used for advertising.

Preference cookies

NEXT_LOCALE and NEXT_THEME remember the language and appearance explicitly selected by the user for up to one year. They can be changed in Settings or removed in the browser.

Mailbox authorization is separate

Clicking “Connect Google mailbox” or “Connect Microsoft mailbox” starts a separate provider consent flow. It authorizes identity and email sending; it is not consent to analytics or advertising. Disconnecting the mailbox removes the stored active authorization tokens.