MAIA uses minimal cookies and browser storage. Here's exactly what's stored and why.
The Enterprise App (app.maiaos.ai)
The app stores an authentication token in localStorage (not a cookie) under the key maia_token. This is a JSON Web Token (JWT). It stays valid for as long as your session is retained — 24 hours after your last activity, up to a maximum of 7 days from when the session started. It keeps you signed in so you don't have to re-enter your password on every page load.
The app may also store a maia_passkey_onboarding_seen flag in localStorage to track whether the passkey setup prompt has been shown.
No advertising cookies. No third-party tracking cookies. No analytics cookies.
The Marketing Website (maiaos.ai)
The marketing website is a static site. It does not set any first-party cookies. If analytics are added in the future, this policy will be updated.
Cloudflare Cookies
Cloudflare, which hosts MAIA's infrastructure, may set functional cookies for security purposes:
- __cf_bm — Bot management cookie. Used by Cloudflare to distinguish humans from automated traffic. Expires after 30 minutes of inactivity.
- __cflb — Load balancing cookie (if applicable). Used to route your requests to a consistent server.
These are functional cookies required for the service to operate securely. They do not track you across other websites.
How to Clear Stored Data
To sign out and clear all MAIA-related browser storage: click Sign Out in the app. This removes the authentication token from localStorage. To manually clear: open your browser's developer tools → Application tab → Local Storage → app.maiaos.ai → delete all entries.
Draft — pending legal review. Last updated: March 2026.