This Cookie Policy explains what cookies and local storage MsgBox uses, why we use them, and how you can control them.
Cookies are small text files stored on your device by your browser when you visit a website. Local storage is a similar browser-based mechanism for storing data client-side. Both are used to remember information between page visits.
These cookies are set when you log in to the MsgBox dashboard at msgbox.nbplugins.com/login.
| Cookie Name | Type | Duration | Purpose |
|---|---|---|---|
PHPSESSID |
Essential | Session (deleted when browser closes) | PHP session management. Keeps you logged in while your browser is open. Required for the dashboard to function. |
msgbox_remember |
Essential | 30–365 days (if "Remember Me" selected) | Persistent login token. Set only if you check "Remember Me" at login. Allows automatic re-login without entering your password. Stored as a secure token pair; the actual value stored server-side is a SHA-256 hash, never the raw token. |
The MsgBox chat widget embedded on your customers' websites does not set any cookies. It uses browser localStorage for the following:
| Key | Type | Duration | Purpose |
|---|---|---|---|
msgbox_session_[site_id] |
Essential | Until browser localStorage is cleared | Stores a unique session ID so that a returning visitor's conversation is continued rather than starting a new one. Contains no personal information — only a random identifier. |
msgbox_widget_open |
Essential | Until browser localStorage is cleared | Remembers whether the visitor left the chat widget open or closed, so the widget restores its state on page reload. |
MsgBox itself does not set any third-party cookies. However, if your website uses other services (Google Analytics, Facebook Pixel, etc.), those services set their own cookies independently of MsgBox.
The cookies described above are strictly necessary for the service to function. Under GDPR Article 6(1)(b) (contract performance) and the ePrivacy Directive, strictly necessary cookies do not require separate consent. However, you must disclose their use to your website visitors in your own privacy/cookie notice if you use the MsgBox widget on your site.
You can control cookies through your browser settings:
Note: disabling the essential session cookie will prevent you from logging in to the MsgBox dashboard. Clearing localStorage will reset your chat widget state and start a new conversation session.
We may update this policy if we change how we use cookies. The "last updated" date at the top of this page will reflect any changes.