# Cookie Policy

URL: https://email-validation.org/legal/cookies/
Updated: 2026-10-20

> Documentation index: https://email-validation.org/llms.txt

Version October 20, 2026

This document is a draft that is still being reviewed by our lawyers. Company details marked MISSING will be filled in before launch.

email-validation.org uses only cookies that are strictly necessary for the service to work, plus a few preferences kept in your own browser. There are no advertising, analytics or tracking cookies, and no third-party scripts on our public pages, so we do not show a consent banner.

## What we set

| Name | Type | Set by | Purpose | Duration | Where |
| --- | --- | --- | --- | --- | --- |
| \_\_Host-Http-ev\_sid | Cookie · Strictly necessary | email-validation.org | Keeps you signed in. | 7 days of inactivity, at most 30 days | /\* |
| \_\_Host-ev\_csrf | Cookie · Strictly necessary | email-validation.org | Protects your account against cross-site request forgery. | Same as your session | /\* |
| \_\_Host-Http-ev\_pre | Cookie · Strictly necessary | email-validation.org | Ties a sign-in code to the browser that asked for it. | 10 minutes | /signin/, /auth/\* |
| \_\_Host-Http-ev\_oauth | Cookie · Strictly necessary | email-validation.org | Protects the Google sign-in round trip. | 10 minutes | /auth/google/\* |
| \_\_Host-Http-ev\_wa | Cookie · Strictly necessary | email-validation.org | Holds the encrypted passkey challenge while you confirm a passkey. | 5 minutes | /signin/, /auth/\*, /app/\* |
| \_\_Host-Http-ev\_chat | Cookie · Strictly necessary | email-validation.org | Keeps your support chat conversation together. | 24 hours | /chat/, /api/chat |
| \_\_stripe\_mid | Cookie · Payment (Stripe) | Stripe | Fraud prevention by our payment processor; appears only on billing pages. | 1 year (set by Stripe) | /app/billing/\* |
| \_\_stripe\_sid | Cookie · Payment (Stripe) | Stripe | Fraud prevention by our payment processor; appears only on billing pages. | 30 minutes (set by Stripe) | /app/billing/\* |
| ev-theme | Browser storage · Preference | email-validation.org | Remembers whether you chose the light or dark theme. | Until you clear site data | /\* |
| ev-lang | Browser storage · Preference | email-validation.org | Remembers the programming language you picked in code examples. | Until you clear site data | /docs/\*, /email-verification-api/ |
| ev-dismiss:\* | Browser storage · Preference | email-validation.org | Remembers notices you dismissed, such as a credits-expiring banner. | Until you clear site data | /app/\* |
| ev-check | Browser storage · Strictly necessary | email-validation.org | Carries the address you checked in the free checker to sign-in when you click a sign-up link, so it never goes in a URL. | Read once at sign-in; ends with the browser tab | /, /email-checker/, /signin/\* |
| ev-intent | Browser storage · Strictly necessary | email-validation.org | Remembers what you were doing (check, buy, open a page) while you sign in with Google or a passkey. | Used once after sign-in; ends with the browser tab | /signin/\*, /app/\* |

- Cookies whose names start with `__Host-` are sent only over HTTPS, only to our own domain and cannot be read by other sites. Those marked `Http` cannot be read by scripts either.
- Browser storage entries stay on your device. They hold preferences such as your theme or code language, never the addresses you check.

## Payment pages

Our payment processor, Stripe, may set its own fraud-prevention cookies, but only on the billing pages of your dashboard where you pay. They are needed to accept payments safely.

## Page statistics

We count page views on our servers by page, country and the kind of site that sent you. This uses no cookies and no scripts in your browser.

## Your choices

You can delete cookies and site data in your browser at any time. Deleting the session cookie signs you out; deleting preferences resets them to the defaults.