The four categories we use
We split cookies into four buckets — and you can decide per-bucket whether to allow them via the banner or the cookie settings link in the footer.
- Strictly necessary — required to run the site. Sign-in sessions, CSRF tokens, language preference. Cannot be disabled.
- Functional — remembers things you chose (theme, layout, dismissed banners). Enhances your experience but the site still works without them.
- Analytics — cookieless, privacy-friendly page-view counts via Plausible (always on, no personal data); plus optional crash diagnostics when you allow this category.
- Marketing — the Meta (Facebook) pixel, loaded only if you opt in, to measure and improve our Instagram and Facebook ads.
What we actually set
This is the complete list of cookies and similar storage items CVVia sets on the landing site as of the last updated date.
| Name | Category | Purpose | Duration | Type |
|---|---|---|---|---|
| NEXT_LOCALE | Strictly necessary | Remembers your chosen language | 1 year | First-party |
| cvvia_consent | Strictly necessary | Stores your cookie banner choice | 1 year | First-party |
| cvvia_theme | Functional (optional) | Stores your light / dark preference | 1 year | First-party |
| __session (app only) | Strictly necessary | Keeps you signed in on app.cvvia.ai | Session-bound | First-party |
| _fbp | Marketing (optional) | Meta pixel — measures our Instagram / Facebook ads | 3 months | Third-party |
Third-party cookies
By default, the landing site sets no third-party cookies. If you visit the app (app.cvvia.ai) and sign in with Google, Google sets its own authentication cookies under its own privacy policy — we do not control those.
We do not use Google Analytics or LinkedIn Insight tags. If you accept marketing cookies, we load the Meta (Facebook) pixel to measure our Instagram and Facebook ads; it never loads otherwise, and a Do Not Track or GPC signal blocks it too.
Do Not Track and Global Privacy Control
If your browser sends a DNT (Do Not Track) or GPC (Global Privacy Control) signal, we treat it as declining the analytics and marketing categories — the cookie-based trackers (crash diagnostics and the Meta pixel) never load, even if you accepted them in the banner. Cookieless Plausible still counts the page view, since it stores no personal data. This is a defense-in-depth layer and does not replace the banner.
Managing your preferences
You can change your cookie preferences at any time via the "Cookie preferences" link in the footer. Clearing cookies from your browser will also reset your choices, and you will see the banner again on your next visit.
Browser-side, you can block cookies entirely — look for "Privacy and security" in your browser settings. Doing so may sign you out of CVVia and reset preferences.
Consent version and updates
Your saved consent has a version number (currently version 1). If we materially change the categories we use, the third parties we work with, or the cookie list, we increment the version. Next time you visit, the banner reappears so you can review the changes and make a fresh choice. Your previous decision is replaced, not silently reused.