Cookie Policy
The full list of what TOVO PRO stores in your browser, and what each item is for.
Last updated
1What cookies are
A cookie is a small file a site stores in your browser so it can recognise you on your next request. Some are needed for the site to work at all; others remember a preference. The same applies to the equivalent browser storage the app uses, which this page covers too.
2Strictly necessary
These cannot be turned off, because without them you cannot stay signed in. They are set only once you sign in.
| Name | Purpose | Lasts |
|---|---|---|
| sb-access-token | Proves who you are on each request. Short-lived and refreshed silently. | 1 hour |
| sb-refresh-token | Obtains a new access token so you are not signed out every hour. Revoked when you sign out or delete your account. | Until sign-out |
3Preferences
These remember a choice you made. Clearing them loses the preference and nothing else.
| Name | Purpose | Lasts |
|---|---|---|
| tovo-theme | Whether you chose the light or dark appearance. | 1 year |
| tovo-locale | The language you selected, so it survives your next visit. | 1 year |
4What we do not set
We do not set advertising cookies, and we do not embed third-party trackers that follow you to other sites. There is no cookie banner because there is nothing here to consent to beyond what is needed to run the service.
Company profile views are counted for the company's own analytics. That count is de-duplicated to one per visitor per day and is not linked to a browsing history — see the privacy policy.
5Cookies set by our processors
When you open the billing portal or a checkout page, Stripe sets its own cookies to process the payment and detect fraud. Those pages are Stripe's, and Stripe's cookie policy applies to them.
6Controlling cookies
Every browser lets you view and delete cookies, and block them by site. Blocking the strictly necessary ones will sign you out and prevent you signing back in; everything else is safe to clear.
Signing out clears the session cookies immediately and revokes the refresh token on our side as well, so clearing your browser is not required for it to take effect.
Questions about this document?
If anything here is unclear, or you want to exercise one of your rights, a person will answer.