Version: 1.0 · Last updated: 2026-09-26
How AUVY uses cookies and local storage alongside the Product Privacy Notice.
Categories and legal basis
We distinguish between storage that is strictly necessary to provide the requested service and preference storage. Strictly necessary authentication, security, routing, and load-balancing storage is used to perform the contract and protect the service. AUVY sets no analytics or advertising cookies.
Authentication and sessions
AUVY authentication uses Better Auth. Depending on domain and deployment security settings, Better Auth sets an HTTP-only session cookie (for example a better-auth.session_token cookie or its secure-prefixed equivalent) and may use short-lived state, nonce, or callback cookies during sign-in. These values authenticate the browser, protect login flows, and expire or rotate according to the active session configuration.
Product clients may also use the key auvy-session-token in browser localStorage or sessionStorage for an authenticated product session where that client flow requires it. localStorage persists until sign-out, rotation, expiry handling, or deletion of site data; sessionStorage is limited to the browser tab/session. These stores are not advertising trackers.
Locale & UI preferences
The language cookie auvy-locale (up to 12 months) remembers the language you chose on auvy.ai; local storage keeps the dark/light mode on your device. Neither identifies you, and both are strictly necessary for the function you asked for (§ 25 (2) no. 2 TDDDG).
Analytics
Product analytics in AUVY workspaces is first-party: usage events are sent to AUVY's own API with the existing authenticated session and processed only on AUVY-operated infrastructure, as described in the Product Privacy Notice. No analytics cookie, browser-storage identifier, or third-party analytics script is used. AUVY's websites (auvy.ai, trust.auvy.ai, docs.auvy.ai) run no analytics at all and need no consent banner.
Change or withdraw preferences
You can delete these cookies and storage entries at any time in your browser settings. Deleting authentication cookies or auvy-session-token storage signs the browser out or ends the affected session. Workspace administrators may disable optional analytics configuration independently.