Cookie Policy

This Cookie Policy explains how Metatrix Labs uses cookies and similar on-device storage technologies when you use the metatrix.ai service (the “Service”). It should be read together with our Privacy Policy and Terms of Service. metatrix.ai is a hosted, fully serverless AI platform serving a global audience, and we take a deliberately minimal approach: we use only the storage that makes the Service work.

1. What cookies and similar technologies are

“Cookies” are small text files that a website asks your browser to store and send back on later visits. In this policy we use “cookies” broadly to include related technologies that store data on your device, whichever the underlying mechanism:

• Cookies — small key/value files sent between your browser and our servers, used here to keep you signed in and to maintain a continuous session.
• localStorage — a browser store that keeps information on your device (such as your preferences) until you clear it. It is not automatically sent to our servers.
• IndexedDB — an in-browser database that lets the Service keep larger on-device data, such as your local history, entirely on your device.

We describe these in a technology-neutral way because the important question is not the mechanism but the purpose: every item listed below exists to deliver a feature you asked for.

2. Our approach — functional storage only

We use only strictly-necessary and functional storage. Concretely, that means:

• We do not use advertising cookies.
• We do not use third-party analytics cookies.
• We do not build advertising profiles and we do not track you across other websites or services.
• We do not sell or share your information with data brokers or ad networks.

The single exception to “first-party only” is functional: the Real Room feature loads map and tile imagery from a third-party map provider so that maps can be drawn. Loading that imagery necessarily transmits your IP address to the map provider, and if that provider chooses to set its own cookies, those cookies are outside our control and are considered non-essential. This is detailed in the inventory below.

3. Cookie and storage inventory

The following table lists every category of cookie and on-device storage the Service uses.

Name / item	Party	Type	Purpose	Duration
iomx_session	First-party	Functional / session	Keeps you signed in and links you to your saved creations. Set as HttpOnly, Secure, SameSite=Lax.	~30 days
Authentication cookie(s) where you sign in (including Google OAuth)	First-party	Functional	Maintain your login session so you don’t have to re-authenticate on every request.	Session / short-lived
localStorage & IndexedDB	First-party / on-device	Functional	Store your settings and local history on your own device.	Until you clear them
Real Room map / tile requests	Third-party map provider	Functional map rendering	Display maps; transmits your IP address to the provider so tiles can be served. Any cookies the provider sets are non-essential and outside our control.	Per provider

4. Consent basis

Under Canadian privacy law — the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25 — storage that is strictly necessary to provide a service you have requested does not require a consent pop-up. Everything in the inventory above is either strictly necessary or functional, so we do not show a cookie banner.

If we ever introduce analytics, advertising, or a map provider that sets non-essential cookies, those technologies will be off by default and will require your explicit opt-in before they run, consistent with Quebec Law 25’s requirement of clear, affirmative consent for non-essential technologies.

5. EU / UK note (ePrivacy)

For visitors in the European Economic Area and the United Kingdom, the ePrivacy rules require consent before storing or accessing information on your device unless the storage is strictly necessary to provide the service you requested. We rely on that strictly-necessary exemption for the functional items listed above, and we would obtain your consent before setting any non-essential cookie. Where we act as a data controller, our lawful bases and your rights are described in the Privacy Policy.

6. How to control cookies and storage

You are always in control of what stays on your device:

• Browser controls — every major browser lets you block or delete cookies and site data through its settings (usually under “Privacy” or “Site settings”). You can also browse in a private/incognito window, which clears storage when you close it.
• Clear cookies, localStorage and IndexedDB — use your browser’s “Clear browsing data” or per-site “Clear data” option to remove the iomx_session cookie, your authentication cookies, and any localStorage or IndexedDB the Service has stored.
• Sign out — signing out clears your session and authentication cookies.
• Delete your account — you can delete your account to remove your saved creations and associated server-side data, as described in the Privacy Policy.

Please note that blocking or clearing strictly-necessary cookies will sign you out and may stop parts of the Service from working, since they are what keep your session running.

7. Do Not Track and Global Privacy Control

We honour recognized opt-out signals, including browser Do Not Track (DNT) and Global Privacy Control (GPC), for any non-essential tracking. Because we do not run advertising or third-party analytics and do not track you across sites, there is currently no cross-site tracking for these signals to switch off; should we ever add any non-essential technology, a DNT or GPC signal from your browser will be treated as your request to opt out of it.

8. Children

The Service is not directed to children, and we do not knowingly use cookies to collect information from children. If you believe a child has provided us with information, please contact us and we will delete it.

9. Changes to this policy

We may update this Cookie Policy to reflect changes in the Service or in the law. When we do, we will revise the “Last updated” date and version above. If a change introduces any non-essential cookie or storage, we will obtain your opt-in consent before it takes effect.

10. Contact

Questions about this Cookie Policy or our use of on-device storage can be sent to support@metatrix.ai. For a full description of how we handle personal information, see our Privacy Policy.