Cookie Policy
Last updated: 22 March 2026 · Effective: 22 March 2026
1. What Are Cookies?
Cookies are small text files that are placed on your computer, tablet, smartphone, or other device when you visit a website or use a web application. Cookies are widely used to make websites work more efficiently, to remember your preferences, to keep you logged in, and to provide information to website operators about how their sites are used.
In addition to cookies, the Service also uses related technologies to store information on your device:
- Session storage: Session storage is a type of web storage that stores data only for the duration of a browser session. Data stored in session storage is automatically cleared when you close the browser tab or window. We may use session storage to temporarily hold form data or navigation state during your current session.
- Local storage: Local storage is a type of web storage that persists data on your device even after you close the browser. Unlike cookies, data in local storage is not automatically sent to our servers with each request. We may use local storage to remember your UI preferences (such as collapsed navigation panels) between sessions.
- Pixel tags and web beacons: These are small transparent images embedded in emails or web pages that allow us to determine whether an action (such as opening an email) has been performed. We may use these in transactional emails to confirm email delivery.
Throughout this Cookie Policy, all of the above technologies are collectively referred to as “cookies” unless otherwise specified.
2. Cookies We Use
The following table describes the specific cookies and similar technologies used by the Service, their purpose, and their duration:
| Cookie Name | Type | Duration | Purpose |
|---|---|---|---|
| sb-auth-token | Essential | Session | Stores the Supabase authentication session token that identifies you as a logged-in user. This cookie is required to access any authenticated area of the Service. |
| sb-refresh-token | Essential | 7 days | Stores a refresh token used to automatically renew your authentication session when the primary session token expires. This enables persistent login between browser sessions without requiring you to re-enter your credentials. |
| lokvio-preferences | Functional | 1 year | Stores your UI preferences, such as theme selection, language settings, and navigation state. This enables the Service to remember your preferences between sessions so you don’t need to reconfigure them each time you log in. |
| _vercel_analytics | Analytics | 90 days | Set by Vercel Analytics for privacy-preserving usage analytics. This cookie does not store your IP address or any personally identifiable information. It is used only to count page views and interactions in aggregate without cross-site tracking or user profiling. |
| __stripe_* | Payment | Session | Set by Stripe during payment processing to prevent fraudulent transactions and maintain payment session state. These cookies are only set when you interact with Stripe payment components (e.g., during plan upgrade or subscription change). Governed by Stripe’s Privacy Policy. |
| polar_* | Payment | Session | Set by Polar during checkout or subscription management flows to maintain payment session state and prevent fraud. These cookies are only set when you interact with Polar payment components. Governed by Polar’s Privacy Policy. |
Note: Cookie names and durations may change as we update our infrastructure. This table is reviewed and updated periodically to remain accurate.
3. Essential Cookies
Essential cookies (also called strictly necessary cookies) are required for the Service to function correctly. Without these cookies, core features of the Service - such as logging in, maintaining your session, and accessing your organisation’s data - would not work.
Because essential cookies are strictly necessary to provide the Service that you have requested, they are placed on your device without requiring your prior consent. We process the data associated with essential cookies on the legal basis of contractual necessity (Article 6(1)(b) GDPR and equivalent provisions under applicable national laws).
You cannot disable essential cookies through our cookie preference centre. If you wish to remove essential cookies, you must do so through your browser settings, but please be aware that doing so will prevent you from using the Service - you will not be able to log in or maintain an authenticated session.
Our essential cookies include:
- sb-auth-token - Authentication session token
- sb-refresh-token - Session refresh token
4. Functional Cookies
Functional cookies (also called preference cookies) allow the Service to remember choices you have made and to provide enhanced, more personalised features. They may be set by us or by third-party providers whose services we have added to our pages.
Our functional cookies remember your UI preferences (such as theme, language, and navigation state) so that these settings persist across your browser sessions. Without functional cookies, you would need to reconfigure your preferences each time you log in.
Functional cookies do not track your browsing activity across other websites. They are used solely to improve your experience within the Lokvio application. You can choose to disable functional cookies, but this may mean that certain preferences are not saved and you may have a less personalised experience.
Our functional cookies include:
- lokvio-preferences - UI preferences (theme, language, navigation state)
5. Analytics Cookies
We use Vercel Analytics to understand how the Service is being used, which pages and features are most visited, and how users interact with the application. This information helps us make data-informed decisions about product improvements and feature development.
Vercel Analytics is designed with privacy as a core principle. Key characteristics of Vercel Analytics include:
- No IP address storage: Vercel Analytics does not log or store individual IP addresses. Geographic information (country level) is derived from the IP address in real time and then discarded.
- No cross-site tracking: Vercel Analytics does not use cross-site tracking cookies or fingerprinting to track you across other websites.
- Aggregate reporting only: All analytics data is reported in aggregate form. We see page view counts, feature usage patterns, and general geographic distribution, but not the behaviour of individual identified users.
- GDPR compliance: Vercel Analytics is designed to be compliant with GDPR and CCPA requirements without requiring user consent for analytics purposes, as it does not process personal data in a manner that requires consent under applicable privacy law.
Our analytics cookies include:
- _vercel_analytics - Privacy-preserving usage analytics
You may opt out of Vercel Analytics by enabling the Do Not Track (DNT) signal in your browser settings. Vercel Analytics respects the DNT browser signal and will not collect analytics data when DNT is enabled. You can also use a content blocker or browser extension that blocks analytics scripts.
6. Third-Party Cookies
Certain third-party services that we use may set their own cookies on your device. These third-party cookies are governed by the respective privacy policies of those third parties, not by this Cookie Policy. We have no control over these third-party cookies and cannot access them.
The third parties whose services may set cookies on your device when you use Lokvio include:
- Stripe: During payment processing (when you upgrade, change, or manage your subscription), Stripe may set cookies for fraud prevention and payment session management. These cookies are governed by Stripe’s Privacy Policy.
- Polar: During checkout or subscription management via Polar, cookies may be set for session state and fraud prevention. These cookies are governed by Polar’s Privacy Policy.
We select third-party service providers who are committed to data privacy and security, and we only integrate third-party services where necessary to provide the Service functionality.
7. Your Choices and Cookie Management
You have several options for managing cookies when using the Service:
7.1 Browser Settings
Most web browsers allow you to control cookies through their settings. You can typically:
- View the cookies stored on your device
- Delete all or specific cookies
- Block all cookies by default
- Block third-party cookies while allowing first-party cookies
- Allow cookies only from specific websites
Important note: Blocking or deleting essential cookies (specifically our authentication cookies) will prevent you from logging in and using the authenticated features of the Service. If you disable all cookies, you will not be able to use Lokvio.
The following links provide instructions for managing cookies in the most popular browsers:
- Google Chrome - Cookie settings guide
- Mozilla Firefox - Cookie settings guide
- Apple Safari - Cookie settings guide
- Microsoft Edge - Cookie settings guide
7.2 Do Not Track
Some browsers include a “Do Not Track” (DNT) signal that you can enable to indicate that you do not want your browsing activity tracked. Vercel Analytics respects the DNT signal: when DNT is enabled in your browser, Vercel Analytics will not collect analytics data about your session.
7.3 Mobile Devices
On mobile devices, cookie management is typically handled through the browser application settings (e.g., Safari settings on iOS or Chrome settings on Android). You can also reset your device’s advertising identifier through your device’s privacy settings, though this primarily affects advertising-related tracking, which we do not engage in.
8. Cookie Consent
8.1 EU and UK Users (ePrivacy / UK PECR)
Under the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (PECR), we are required to obtain your consent before placing non-essential cookies on your device. When you first visit the Service, you will be presented with a cookie consent banner that allows you to:
- Accept all cookies (essential, functional, and analytics)
- Accept only essential cookies
- Customise your preferences for each category of cookie
Your consent preferences are stored so that we do not ask again on subsequent visits. You can change your cookie preferences at any time by accessing the “Cookie Settings” link in the footer of the application. Withdrawing consent for non-essential cookies will not affect the lawfulness of processing based on consent before its withdrawal, and will not affect your ability to use the core features of the Service.
8.2 California Users (CCPA/CPRA)
We do not sell the data collected through cookies to third parties, and we do not share cookie data for cross-context behavioural advertising purposes. California residents therefore have no need to opt out of “sale” of cookie data, as we do not engage in such activities. If you have any questions about our data practices as a California resident, please contact us at privacy@lokvio.com.
8.3 Other Jurisdictions
For users in other jurisdictions, including Thailand, Brazil, South Africa, Canada, Australia, and the UAE, our use of analytics and functional cookies is carried out in accordance with applicable local data protection law. Where consent is required under local law, we will obtain it through our cookie consent banner. Where analytics cookies qualify as privacy-preserving under local law (e.g., because they do not process personal data), we may deploy them without explicit consent while providing transparency through this policy.
9. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, the technologies we deploy, or changes in applicable law. When we make material changes to this policy, we will update the “Last updated” date shown at the top of this page and, where appropriate, notify you via the cookie consent banner or by email.
We encourage you to check this page periodically to stay informed about our use of cookies. Your continued use of the Service after the posting of changes to this policy constitutes your acceptance of the changes to the extent permitted by applicable law. For material changes affecting non-essential cookies, we will re-obtain your consent where required.
10. Contact
If you have any questions about our use of cookies or this Cookie Policy, or if you wish to exercise your rights in relation to cookie data, please contact us:
Email: privacy@lokvio.com
We aim to respond to all cookie-related enquiries within 30 days of receipt.
For more information about how we handle your personal data more broadly, please review our Privacy Policy.