Cookie Policy
Last updated 8 November 2026. Matriarch Solutions Inc. Reach 1.0, adapted from TheOne policy version 1.3.0 (27 October 2026).
This page explains the technologies Reach uses to store information on your device or read information from it, why we use them, and how you control them. It forms part of the Privacy Policy at https://reach-usa.com/privacy/ and uses the same definitions.
1. What these technologies are
| Technology | What it is |
|---|---|
| Cookies | Small text files a site stores in your browser and reads on later visits. First-party cookies are set by the site you are on; third-party cookies are set by another domain |
| Local storage, session storage and IndexedDB | Browser storage that a site's own code writes and reads. Session storage clears when the tab closes; the others persist until cleared |
| Server-side identifiers | Identifiers we create and keep on our own systems, linked to a session or an account |
2. The rule we follow
In the European Economic Area (EEA), the United Kingdom and Switzerland we store nothing on your device and read nothing from it before you have chosen, except what is strictly necessary to provide something you asked for. Elsewhere we apply the same categories.
"Strictly necessary" means the thing you asked for cannot work without it: signing in, keeping you signed in, connecting an account you asked to connect, and protecting the form you are submitting. We do not label anything strictly necessary because it is convenient for us.
Visitors in the EEA, the United Kingdom and Switzerland, and visitors whose country we cannot tell, see a cookie banner on their first visit. Refusing is as easy as accepting: Reject and Accept sit side by side, with equal weight. Reach sets the Analytics item only after Accept. Elsewhere it runs unless your browser says no (below).
If your browser sends the Global Privacy Control signal, we treat it as a refusal of the Analytics category without asking.
Change your choice at any time under "Your cookie choice" at the top of this page. Rejecting deletes the Analytics item.
3. Categories
| Category | Purpose | If you decline |
|---|---|---|
| Strictly necessary | Signing in and staying signed in; protecting sign-in and account connections; finishing an invitation you opened; remembering your cookie choice | Not applicable. These cannot be turned off without breaking the service |
| Functional | Remembering your settings and unsaved work: theme, menu layout, last workspace, editor settings, and editor work kept on your device | Settings reset, and unsaved editor work is not kept |
| Analytics | Counting which logo a visitor saw on the home page, in aggregate | We lose the count; you lose nothing |
4. Inventory
All items are first-party (set by Reach, on reach-usa.com) unless the table says otherwise. "Persistent" means it remains until you clear it.
4.1 Cookies
| Name | Category | Purpose | Duration |
|---|---|---|---|
| reach_session | Strictly necessary | Keeps you signed in. Secure, HTTP-only | Up to 30 days; deleted when you sign out |
| reach_signin_google, reach_signin_apple | Strictly necessary | Ties a sign-in to the browser that started it | 10 minutes, one use |
| reach_connect_binding, reach_vault_binding | Strictly necessary | Ties an account or Google connection to the browser that started it | 10 minutes, one use |
| reach_consent | Strictly necessary | Remembers your cookie choice, or that no choice is needed where you are | 12 months; 30 days when no choice is needed |
| __cf_bm, cf_clearance (Cloudflare, only if enabled) | Strictly necessary | Bot protection by our hosting provider | 30 minutes; up to 12 months |
4.2 Browser storage
| Key | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| reach_invite_token | Local storage | Strictly necessary | Finishes a workspace invitation you opened, after you sign in | Until used |
| reach_theme | Local storage | Functional | Day or night theme | Persistent |
| reach_nav_open, reach_nav_collapsed | Local storage | Functional | Console menu layout | Persistent |
| reach_workspace | Local storage | Functional | The workspace you used last | Persistent |
| reach.image-editor.settings.v1, reach.image-editor.export.v1 | Local storage | Functional | Image editor settings and export choices | Persistent |
| reach-image-editor | IndexedDB | Functional | A recovery copy of open image editor work, so a crash or closed tab loses nothing. Holds your work on your device | Until you open or discard it |
| reach.video-editor.project.<workspace>, reach.video-editor.source-buttons | Local storage | Functional | Your video editor project and button layout, kept on your device | Persistent |
| reach.agent.session.<workspace>.<composition> | Local storage | Functional | Reopens your Agent pane conversation | Persistent |
| reach_logo_variant | Local storage | Functional | Which logo the home page shows you | Persistent |
| reach_visitor | Local storage | Analytics | A random id for the home page logo test, set only after you accept (or where no choice is needed). Sent with each logo view and click, and hashed when it arrives | Persistent; deleted when you reject |
4.3 Other services your browser contacts
| Provider | When | What they receive |
|---|---|---|
| Reach's own API (reach-usa.com/v1 and api.reach-usa.com) | Using Reach | As described in the Privacy Policy |
| Cloudflare, our hosting provider | On your first visit, to tell whether the cookie banner applies | Your country, worked out from your internet address at the edge. Nothing is stored |
| Google or Apple | When you sign in | What you enter on their sign-in page; their own policy applies |
| TikTok, Meta, LinkedIn, Google and X | When you connect an account | What you enter on their consent page; their own policy applies |
| Stripe | When you choose to pay | What you enter on Stripe's page; Stripe's own policy applies |
5. How to control these technologies
| Control | Where |
|---|---|
| Your cookie choice | The cookie banner, or "Your cookie choice" at the top of this page |
| Global Privacy Control | Your browser or extension; we honour it automatically |
| Block or clear cookies and site data | Your browser's privacy settings. Clearing site data also removes everything in section 4.2, including unsaved editor work |
| Delete everything we hold | https://reach-usa.com/data-deletion/ |
Blocking strictly necessary storage will stop you signing in. That is how sign-in works, not a penalty.
6. Do Not Track
The older Do Not Track signal has no agreed meaning, so we do not treat it as an opt-out. Use Global Privacy Control; it works.
7. Changes
We update this page when we add, remove or change a technology. Material changes are notified as described in the Privacy Policy, section 16, and we ask for consent again where the change needs it.