⚠️ DRAFT — pending legal review
This document has not been reviewed by a lawyer and is not final. Blanks marked [TODO] must be filled in before public launch. MaplePath is not a law firm and this page does not constitute legal advice.
Cookie Policy
Last updated: June 28, 2026
This Cookie Policy explains what cookies and similar technologies MaplePath uses, why we use them, and how you can control them. It should be read alongside our Privacy Policy.
What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make sites work efficiently and to provide information to site owners. We also use localStorage (browser storage) to remember your cookie consent preferences — this is technically not a cookie but works similarly and is subject to the same consent rules under Quebec Law 25.
Our Cookie Categories
We group our cookies into three categories. You can accept or reject each optional category separately via the consent banner or the button at the bottom of this page.
1. Necessary (Always On)
These are strictly necessary for the site to function. They cannot be disabled. They do not track you for marketing purposes.
| Name / Technology | Provider | Purpose | Duration |
|---|---|---|---|
mp_consent (localStorage) | MaplePath | Stores your cookie consent choice (category preferences, version, timestamp). Required by Quebec Law 25 to document consent. | Persistent (until cleared by user) |
| Supabase auth session | Supabase (ca-central-1) | Maintains your authenticated session after login. Without this you would be logged out on every page. | Session / up to 7 days (with “remember me”) |
| CSRF token | MaplePath | Prevents cross-site request forgery attacks on form submissions. | Session |
| Rate-limit counter | Upstash | Server-side counter (not a browser cookie) used to prevent abuse of API endpoints. Not stored in your browser. | Minutes to hours |
2. Analytics (Opt-In)
Analytics cookies help us understand how visitors use the site — which pages are most visited, where users encounter problems, and how to improve the experience. We only activate analytics cookies after you give explicit consent.
| Name / Technology | Provider | Purpose | Duration |
|---|---|---|---|
| [TODO — provider TBD] | [TODO] | Page view analytics, event tracking, funnel analysis. This policy will be updated with full details before any analytics provider is activated. | [TODO] |
Status: not currently active. The consent mechanism is built and in place; no analytics tags will fire until a provider is chosen and you have opted in.
3. Marketing (Opt-In)
Marketing cookies are used to show you relevant advertisements and to measure the effectiveness of ad campaigns. We only activate marketing cookies after you give explicit consent.
| Name / Technology | Provider | Purpose | Duration |
|---|---|---|---|
| [TODO — provider TBD] | [TODO] | Ad targeting and conversion tracking. This policy will be updated with full details before any marketing cookies are activated. | [TODO] |
Status: not currently active.
How to Control Cookies
- MaplePath consent banner: use the button below (or the Cookie settings link in the footer) to review and change your preferences at any time. You can withdraw consent just as easily as you gave it.
- Browser settings: all modern browsers allow you to block or delete cookies. Note that blocking necessary cookies will prevent the site from working correctly.
- Third-party opt-out tools: once analytics or marketing providers are confirmed, links to their opt-out mechanisms will be added here.
Your consent preference is stored in your browser’s localStorage. If you clear your browser data or use a different device, you will be asked again.
Legal Basis for Cookie Use
Necessary cookies are used on the basis of legitimate interests and contractual necessity — the site cannot function without them. Analytics and marketing cookies require your explicit opt-in consent under Quebec Law 25 and PIPEDA. We do not use cookie walls or make access to the Platform conditional on accepting optional cookies.
Changes to This Policy
We will update this policy whenever we add, remove, or change cookies or tracking technologies — particularly when analytics or marketing providers are activated. Check the “Last updated” date above. If changes materially affect your rights, we will notify you and ask for fresh consent where required.
Contact
Questions about our use of cookies? Email privacy@joinmaplepath.com.
Manage your cookie preferences
Review or change which optional cookies you allow at any time.