VARNEVO Legal
Cookie Policy
Strictly necessary cookies are used to run the service. Analytics only runs with your explicit permission; if you decline, no analytics cookie or local-storage record is created.
Last updated: 18 October 2026 · Version: 2026-10-18
1. Cookies and Similar Technologies
Cookies and browser local storage (localStorage/sessionStorage) are small pieces of data. They keep you signed in, keep the service secure, remember your preferences and — if you allow — help us improve the product.
2. Cookies We Use
| Category | Provider / name | Purpose | Duration | Consent needed |
|---|---|---|---|---|
| Necessary | Supabase Auth (sb-*-auth-token) | Sign-in and authentication | Session / refresh period | No (required to provide the service) |
| Necessary | Cloudflare Turnstile | Bot and abuse protection | Session / short-lived | No (security) |
| Necessary | varnevo_cookie_consent_v2 (local storage), locale cookie | Remember your cookie choice and language | Until you change it / 1 year | No (to store your choice) |
| Analytics | PostHog (ph_* cookie/storage) | Usage statistics, product improvement | Up to 1 year; data up to 365 days | YES — OFF by default |
We do not use advertising or social-media tracking cookies. We do not record sessions (no session replay).
3. Your Choices
On your first visit a choice screen is shown: "Necessary only" and "Also accept analytics" have equal prominence. Analytics does not run before you decide.
You can change your choice at any time with "Change cookie preferences" in the page footer or on this page, and withdraw consent as easily as you gave it. When you withdraw, analytics stops and the analytics identifier in your browser is deleted. If the cookie text changes materially we ask again. You can also delete or block cookies in your browser settings; functions such as signing in may then stop working.
4. Legal Basis
Necessary cookies are required to provide the service (KVKK Art. 5/2-c, 5/2-f; GDPR Art. 6(1)(b),(f); the strictly-necessary exemption in ePrivacy Art. 5(3)). For analytics the basis is your explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)).