Legal

Cookie Policy

Effective 2026-09-02. ProvenVisible sets at most three cookies, all of them required for the product to work at all. On top of those, analytics cookies are set only if you accept them — and not a moment before.

Ce texte n'est publié qu'en anglais. Il n'a pas été traduit, car un texte juridique non relu par un avocat dans cette langue ne devrait pas être présenté comme contraignant. Avis KVKK turc.

Cookie	What it does	Lifetime	Category
`pv_uid` HTTP-only, SameSite=Lax, Secure in production	Keeps you signed in. Contains your account id and a signature that proves the value was issued by us.	30 days	Strictly necessary
`pv_oauth_nonce` HTTP-only, SameSite=Lax, Secure in production	Single-use value that ties a Google sign-in to the browser that started it. Without it, someone could try to attach their own Google account to your session.	15 minutes, deleted as soon as the sign-in finishes	Strictly necessary (security)
`pv_lang` Readable by the page (not HTTP-only), SameSite=Lax	Remembers which language the interface is in — the one you pick in the language menu, or the one implied by a language-prefixed address such as /de/pricing.	1 year	Strictly necessary (your own preference)

Analytics cookies — only after you accept

We use Google Analytics 4 to see which pages people actually read. It is not strictly necessary, so it is switched off until you press Accept analytics on the banner. Until then the script is never fetched and these cookies do not exist:

Cookie	What it does	Lifetime	Category
`_ga`	Tells Google Analytics apart one browser from another. Set only after you accept.	2 years	Analytics — consent required
`_ga_<container>`	Keeps the current Analytics session together. Set only after you accept.	2 years	Analytics — consent required

There is still no advertising pixel, no tag manager and no session-recording script. Declining costs you nothing: every feature works the same.

Changing your mind

Your choice is stored in your browser, not in a cookie, and you can change it whenever you like: . If you withdraw consent, the analytics cookies already set are deleted immediately.

Local storage and similar technologies

The dashboard does not store your data in browser local storage or use fingerprinting techniques. Screenshots and audit results live on the server, tied to your account.

Third-party cookies

When you sign in with Google, Google sets its own cookies on its own domain as part of that sign-in. That is governed by Google’s privacy policy, not ours; we never see those cookies. The analytics cookies above are also Google's, but they are set on this domain and only with your consent.

What we store on the server — and for how long — is described in the privacy policy.