Cookie Policy

Version 4.0 — policy last updated 20 October 2026

In short. Our website uses cookies and similar technologies for measurement, advertising and identifying business visitors. Visitors we place in the EEA, the UK or California (location from your IP address, approximate) see a banner first, and nothing non-essential runs until they accept. Everywhere else the technologies start when a page loads. To stop them at any time: use "Cookie settings" in the footer or turn on the Global Privacy Control signal in your browser.

1. Who we are and what this policy covers

This Cookie Policy explains how cookies and similar technologies are used on our website at maestra.io (the "Website"). Our documentation sites at help.maestra.io and developers.maestra.io run on third-party documentation platforms (Mintlify and ReadMe) and are not covered by this policy. The Maestra Platform is the marketing software we provide to our customers. This policy covers the Website only: it does not cover the Maestra web application that our customers and their users log in to, and it does not cover the websites and apps of our customers that use the Maestra Platform (section 10).

If you visit from the European Economic Area or the United Kingdom, the Website is operated by Maestra B.V., Haarlemmerweg 331 A, 1051 LH Amsterdam, the Netherlands (Chamber of Commerce no. 70240833). Otherwise it is operated by Maestra.io LLC, 1167 Massachusetts Avenue, Arlington, MA 02476, USA. "We" means the company responsible for you. Company details: Maestra.io LLC, Maestra B.V.. How we handle personal data, and the rights you have, are described in our Privacy Policy.

Questions: dpo@maestra.io.

2. Cookies and similar technologies

Cookies are small text files that a website stores in your browser. We also use similar technologies: browser storage (local and session storage), scripts and pixels that read information from your browser and send it to us or to a provider, and identifiers derived from your browser or device. In this policy, "cookies" means all of them. Cookies stored under maestra.io, whether by our own code or by a provider's script running on our pages, are first-party; cookies that a provider sets from its own domain are third-party.

3. Where we ask first, and where we do not

We ask before any non-essential technology runs if you visit from the European Economic Area, the United Kingdom or California, if your browser's clock is set to Los Angeles time (a stand-in for California visitors whose location we cannot see), or if we cannot determine your location. Your location comes from your IP address and is approximate. In these cases the Website shows a banner with two equal choices, Accept and Reject; until you choose, only the strictly necessary technologies in section 8 run.

Everywhere else, including the rest of the United States, there is no banner and the technologies listed in section 8 — including advertising and visitor identification — start when the page loads, except where a row of the list says a tool loads later (when you open a form, play a video or click a search result). If you are in California and see no banner, use "Cookie settings" in the footer or the Global Privacy Control signal (section 4); both work everywhere.

Your choice is stored for 12 months in the cookie maestra_consent. Where we ask first, we ask again when it expires. Everywhere else the technologies start again when the page loads once it has expired — renew your choice through "Cookie settings", or keep the Global Privacy Control signal on, which does not expire. If we change the banner we may ask you again, but never within 12 months of a refusal. You can change your choice at any time through "Cookie settings" in the footer of every page.

4. Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as Reject wherever you are: none of the analytics, advertising or visitor-identification technologies in section 8 runs in that browser, and our own attribution cookie is not written. Under US state privacy laws the signal is also your request to opt out of the sale and sharing of your personal information and of targeted advertising for that browser; we honor it without asking you anything further. If you accepted earlier in the same browser, the signal prevails.

We do not respond to "Do Not Track" signals.

5. What a refusal does

When you choose Reject, or send a GPC signal, the non-essential technologies are not loaded. Cookies and browser-storage items under maestra.io that are not strictly necessary are deleted when the page reloads, and we keep removing them on every page load while your choice is Reject. The consent, region and consent-record cookies of section 8 are kept, and so is the browser storage of our on-page tools (for example the UTM link builder's history), because it holds only what you yourself saved. Two cookies are set by servers rather than by our pages — FPID, set by our measurement server, and deviceUUID on api.maestra.io — and page code cannot delete them: while your choice is Reject they are not used and not renewed, and you can delete them in your browser settings. Cookies that a provider has set on its own domain (for example facebook.com or linkedin.com) cannot be deleted by us; you can delete them in your browser or through the provider's controls linked in section 8. A refusal takes effect from the moment you make it; it does not undo processing that took place before.

6. Our record of your choice

We record each Accept and Reject so that we can show it was made: the date and time, the choice, the version of the banner, whether you made it in the banner or in "Cookie settings", your region as we determined it, your browser's time zone, whether a GPC signal was present, the page you were on, and your browser's user-agent string, together with a random identifier that we also store in the cookie maestra_cid. We do not record your IP address or your e-mail address in this log. We keep each record for five years after the choice it documents expires or is replaced. The text of each banner version is retained.

7. Categories

• Strictly necessary. Make the Website work and keep it secure: the region, consent and consent-record cookies, the demo-booking form once you open it, and the browser storage of our on-page tools, which holds only what you save in them. These run without consent and involve no sale or sharing of personal information.
• Analytics and measurement. Tell us how the Website is used and how our advertising performs. No sale or sharing.
• Advertising and audience matching. Let advertising providers show you our ads on other websites and apps, measure those ads, and match you with audiences built from your interactions with us. Under US state privacy laws this is "sharing" and "targeted advertising".
• Visitor identification. We use RB2B (Retention.com) to learn which companies visit the Website and, for visitors in the United States, who the visitor is: it can match a visit to your name, company, work e-mail address and professional profile without you typing anything. When you visit our website, cookies and similar technologies may be used by our visitor-identification provider RB2B to associate your visits to this Website with other personal information it or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then contact you at these e-mail addresses or professional profiles. You may opt out of future identification by visiting https://app.retention.com/optout; to stop marketing messages from us, use the unsubscribe link in any message or e-mail dpo@maestra.io. Under US state privacy laws we treat this exchange as a "sale" of personal information.

How long we keep the data these technologies collect is stated in the Privacy Policy, section 3.

8. The list

The table names every technology on the Website that stores or reads information in your browser or sends it to a provider for measurement, advertising or identification: who provides it, what it does, the cookies and browser storage it uses with their lifetimes, and where the provider explains its own processing and offers its own controls. "On maestra.io" means a first-party cookie or storage item; "on the provider's domain" means a third-party cookie. Our hosting and content-delivery providers receive your IP address to serve the pages and images; they set no cookies.

List last updated: 20 October 2026.

We update the table when the Website changes; the date of the last update is shown above. Where consent is required, a new provider or a new purpose runs only after we have asked you again.

9. Our own technologies

Maestra's own tracker runs on the Website. It records page views, the source of your visit (referrer and campaign) and the forms and pop-ups you open or submit, under a random device identifier, so that we can measure and personalize our own marketing. It belongs to the "Analytics and measurement" and "Advertising and audience matching" categories and runs only when they may run. The attribution cookie maestra_attribution records the first page you landed on and where you came from, under the same rule.

10. The Maestra tracker on our customers' websites

Our customers may install the Maestra tracker on their own websites and apps. There, the customer controls what the tracker collects and when it starts, including whether it waits for the visitor's consent; the customer's privacy notice applies; and we process the data only on the customer's instructions as its service provider or processor. The tracker's cookies and settings are described in our customer documentation and our published customer terms. Requests about data collected on a customer's website go to that customer — the store or brand whose website you visited or whose messages you received.

11. Your choices

• Cookie settings in the footer of every page reopens the banner so you can change your choice at any time.
• Global Privacy Control: turn it on in your browser or with an extension; we honor it everywhere (section 4).
• Browser controls: every browser lets you delete cookies and browser storage and block them for a site; blocking strictly necessary cookies may stop parts of the Website from working.
• Opt out of sale, sharing and targeted advertising (United States): choose Reject in the banner or in "Cookie settings", turn on the Global Privacy Control signal, or e-mail dpo@maestra.io; the Privacy Policy, section 11, describes your rights and how we answer.
• Provider controls, in addition to the choices above: each row of the list links to the provider's own settings and opt-outs; industry opt-out pages are at optout.aboutads.info, optout.networkadvertising.org and youronlinechoices.com; visitor identification: app.retention.com/optout.
• Complaints (EEA and UK): the Dutch Autoriteit Persoonsgegevens (personal data) or Autoriteit Consument & Markt (cookie rules), or the UK Information Commissioner's Office; your rights are in the Privacy Policy.

12. Changes

We change this policy when the law or our practices change. A new version carries a new version number and date at the top, and the previous version is kept in the archive below. The list in section 8 is updated as the Website changes, with its own date.

Archived versions: Cookie Policy 3.0 (22 October 2024) · Cookie Policy 2.0 (2 August 2023) · Cookie Policy 1.0