Legal
Cookie Policy
In short
- We keep storage to the minimum the product needs: no advertising cookies and no third-party analytics cookies.
- Strictly necessary: the Supabase sign-in session and the cookie decision you make in the banner.
- Functional (preference): your light/dark theme choice.
- Analytics is our own first-party, cookieless pageview counter and runs only after you opt in. Marketing is not in use.
- You can withdraw consent at any time; the table below lists every key, its purpose and its duration.
A plain-language summary for orientation only. It does not change the terms — the full text below governs.
1. About this policy
This policy explains how EvoViral — operated by R7AD, a sole proprietorship in Markham, Ontario, Canada — uses cookies and similar client-side storage (localStorage) when you visit the site or use the app. It should be read together with our Privacy Policy, which covers personal data more broadly.
2. What we store, and why
We keep storage to the minimum the product needs. As of the date above, EvoViral sets no advertising cookies and no third-party analytics cookies. The table lists everything the current code sets.
| Name | Type | Purpose | Category | Duration |
|---|---|---|---|---|
| evoviral-theme | Cookie | Remembers your light / dark / system choice. The server reads it to paint the correct first frame with no flash. | Functional (preference) | 1 year |
| evoviral-theme | localStorage | Client-side half of the same theme choice; used when localStorage is available. | Functional (preference) | Until cleared |
| sb-tbmizbqftczbsbwqgyjx-auth-token | Cookie | Supabase sign-in session. Keeps you logged in. HttpOnly, Secure in production, SameSite=Lax. The exact name is set by Supabase and includes our project reference. | Strictly necessary | Session / token lifetime |
| evoviral-consent-v1 | localStorage | Stores the cookie decision you make in the consent banner, so we do not ask again. | Strictly necessary | Until cleared |
| ev_ws | Cookie | Remembers which workspace you last switched to. HttpOnly, SameSite=Lax, and validated against your memberships on every request — an invalid value falls back to your oldest workspace. | Functional (preference) | 1 year |
| evoviral-analytics-intro | Cookie | Remembers that you dismissed the one-time introduction panel on the Analytics page, so it does not reappear. | Functional (preference) | 1 year |
3. Categories
- Strictly necessary — required for sign-in and to remember your consent choice. These cannot be switched off while you use the service.
- Functional (preference) — remembers a setting you chose, such as the light/dark theme. Turning these off does not stop the app working; you would simply get the default on each visit.
- Analytics — helps us understand how the product is used. We run our own first-party, cookieless pageview counter that stores only aggregate counts and never identifies you; it runs only after you opt in. No third-party analytics provider is used.
- Marketing — would measure campaigns or advertising. Not in use today; if switched on, it loads only after you opt in.
4. localStorage and site data
Some values are kept in your browser’s localStorage rather than in a cookie, because only the browser needs to read them: the theme choice (evoviral-theme) and your consent decision (evoviral-consent-v1). Clearing site data in your browser removes both; the app then falls back to defaults.
5. Analytics and marketing
EvoViral runs no advertising or marketing trackers. Pageview analytics is our own first-party, cookieless counter: it sets no cookie and no browser storage, and it records only aggregate counts — the day, the page path, the referring site’s hostname and a view total — never an IP address or any identifier. It loads only after you choose Accept all or enable Analytics in the consent banner, and no third-party analytics provider is used.
Where consent is the legal basis for optional storage, you can withdraw it at any time (see §6), and withdrawal takes effect from that point on.
6. Your choices and how to withdraw consent
When you first visit, a consent banner lets you Accept all, Reject non-essential, or open Preferences to choose Analytics and Marketing individually. Necessary storage is always on, because the service cannot run without it. Your choice is remembered and never pre-ticked.
To change your mind, reopen the banner’s Preferences, or clear the stored decision by removing the evoviral-consent-v1 (or all site data) in your browser and reloading — the banner will appear again. Withdrawing consent never affects storage that is strictly necessary.
7. Controlling cookies in your browser
Every major browser lets you view, block and delete cookies and site data, and set per-site rules. Blocking strictly necessary cookies will prevent sign-in and may stop parts of the app from working. The theme and consent preferences live in localStorage and are cleared at the same time as site data.
8. Changes and contact
If we add storage that changes what is listed here, we will update this page and, where required, ask for your consent again. Questions: contact our support desk.
See also our Privacy Policy and our Subprocessors.