Cookies are small pieces of data your browser stores so a website can remember things between requests. Kovira uses three categories. Essential cookies are always on. Analytics and performance cookies are set only if you choose them on the consent banner that appears on your first visit. We do not use advertising or cross-site tracking cookies, and we do not sell your data.
Essential cookies (always on)
These are strictly necessary for the platform to work. They keep you signed in, protect form submissions, hold your active workspace, and store the display choices you set yourself, such as theme, text size, and accessibility preferences. We store those preferences only when you change them, and they carry no tracking. Under GDPR Article 5(3) and the ePrivacy Directive, consent is not required for cookies strictly necessary for the service you have requested. Turning these off would break the site.
| Cookie | Purpose | Duration |
|---|---|---|
sb-* | Supabase authentication session | Session / refresh |
kovira_active_tenant | Active workspace selection | Session |
kovira_active_customer | Active client context (MSP) | Session |
kovira_theme | Colour theme preference | 1 year |
kovira_cb | Colour vision accessibility mode | 1 year |
kovira_ts | Text size preference | 1 year |
kovira_ap | Animation and motion preference | 1 year |
kovira_consent | Records your cookie consent choice | 1 year |
Analytics cookies (consent required)
Off by default. Set only if you accept them on the consent banner. Analytics uses Vercel Web Analytics to collect anonymous, aggregated page-view data so we can see which pages are used and improve the product. No personal identifiers and no cross-site tracking are included.
Performance cookies (consent required)
Off by default. Set only if you accept them on the consent banner. Performance uses Vercel Speed Insights to record anonymous Core Web Vitals (LCP, INP, CLS) per page navigation so we can find and fix slow pages. No personal data is collected. You can opt into performance independently of analytics.
Third-party services
When you use parts of the service that hand off to a third party, such as making a card payment through Stripe or receiving a transactional email through Resend, that party may set its own cookies on its own domains. We do not control those, and their privacy policies apply. The providers we rely on are listed on our sub-processors page.
Changing your mind
Your choice is stored in the kovira_consent cookie on your own device for twelve months. To revisit it, clear that cookie in your browser and the consent banner will appear again on your next visit, letting you accept all, reject the optional categories, or customise each one. Clearing your browser data also resets the choice.
More detail
Cookies are covered in the context of everything else we collect in our privacy policy. If you have a question, email privacy@kovira.app.