Cookie Notice

Last Updated: May 8, 2026

Introvy uses cookies and similar technologies (localStorage, sessionStorage) to operate the Service. This Notice explains what we use, why, and how you control them.

1. Categories

Strictly necessary (always on)

Required for sign‑in, session continuity, CSRF protection, fraud prevention, and load balancing. Disabling these will break the Service.

| Cookie / Storage key | Purpose | Lifetime | |---|---|---| | sb-*-auth-token (Supabase) | Authentication session | Session / 7 days | | introvy.consent.v1 (localStorage) | Stores your cookie‑category choices | 12 months | | introvy.consent.records (localStorage) | Per‑document acceptance log mirrored to server | Until cleared | | auth.force_set_password (sessionStorage) | One‑shot password set after invite link | Session | | return_to, next_after_auth (sessionStorage) | Post‑auth redirect target | Session |

Functional (always on for logged‑in users)

Remember UI preferences (theme, last‑opened workspace, draft state). Stored in localStorage; never sent to third parties.

Analytics (off by default)

Only loaded if you accept the analytics category in the cookie banner. We use privacy‑respecting, aggregate analytics only. We never load advertising/marketing trackers.

Advertising / cross‑site tracking

None. We do not place ad cookies and do not share data for cross‑context behavioral advertising.

2. Your choices

• Use the Cookie Settings link at the bottom of every page to change your preferences at any time.
• Use your browser settings to block or delete cookies; this may break sign‑in.
• Configure "Do Not Track" or Global Privacy Control headers — Introvy treats GPC as a CCPA opt‑out signal.

3. Third‑party content

Some pages embed third‑party players (e.g., Cloudflare Stream) which may set their own essential cookies. We do not control third‑party cookies; we link to the relevant providers' notices in our Subprocessors page.

4. Contact

Questions: hello@introvy.ai.