Cookie Policy
This policy lists every cookie and every item of browser storage that worknivo.app and the WorkNivo app use, what each one is for and how long it lasts.
How we handle personal data more generally is explained in the Privacy Policy.
Key things to know
- We use only cookies and browser storage that the site and app need to work: to sign you in, keep sign-in secure and remember choices you make.
- We use no analytics, advertising, tracking or social-media cookies, and no third-party scripts.
- Public pages of worknivo.app set no cookies at all. The only item they can store is the currency you pick in the savings calculator, kept in your browser tab until you close it, and only once you pick one.
- Because nothing optional is used, there is nothing to opt into, so we do not show a cookie banner.
- If we ever add optional cookies, we will ask for your consent first, with an equally clear option to refuse.
This summary is not a substitute for the full text below. If they differ, the full text applies.
1Summary#
Cookies are small files a website stores in your browser. Websites can also keep information in your browser in other ways, such as session storage. The law treats all of these the same way, so this policy covers them all and we call them "cookies" for short.
- Public pages (home, pricing, support, legal pages, sign-in and sign-up forms) set no cookies and make no requests to other companies' servers. Our fonts are served from our own site.
- When you sign in or use the app, we set cookies that keep you signed in, secure the sign-in process and remember which Workspace you chose.
- In your browser tab we may keep two small items: one that stops the intro animation repeating, and one that remembers the currency you picked in the savings calculator. They are never sent to us and disappear when you close the tab.
We do not use local storage, IndexedDB, service workers, analytics, advertising, tag managers, tracking pixels or embedded content from other sites.
2What we use#
"First party" means the item belongs to worknivo.app. "Strictly necessary" means the item is needed to provide a service you asked for, so the law does not require consent for it.
| Name | Type | Purpose | How long it lasts | Category and consent |
|---|---|---|---|---|
sb-<project-ref>-auth-token (may be split into .0, .1 parts) | First-party cookie, set through our authentication provider's library (Supabase) | Keeps you signed in. It holds your sign-in session. | Up to 400 days, renewed while you use the app; deleted when you sign out. [To be confirmed: whether the sign-in cookie may persist this long without a "keep me signed in" choice, and the production session settings] | Strictly necessary. No consent needed. |
sb-<project-ref>-auth-token-code-verifier and per-sign-in variants | First-party cookie (Supabase) | Protects Google sign-in by linking the start and the end of the sign-in to your browser. | Until the sign-in completes | Strictly necessary. No consent needed. |
wn-plan-intent | First-party cookie, only on sign-in addresses | Remembers the plan you chose while you sign up with Google. It holds only the plan and billing interval, not personal data. | 1 hour, or until sign-in completes | Strictly necessary (you asked to sign up with that plan). No consent needed. |
wn-recovery | First-party cookie | Proves that a password change came from the reset link we emailed you. | 15 minutes; deleted when you reset your password or sign out | Strictly necessary (security). No consent needed. |
wn-active-org | First-party cookie | Remembers which Workspace you chose, so the app shows the right company's data. | 1 year; deleted when you sign out or leave the Workspace. [To be confirmed: duration of the Workspace-choice cookie (1 year today; 30 days recommended)] | Strictly necessary (a choice you made in the app). No consent needed. |
wn-legal-intent | First-party cookie, HttpOnly, only on sign-in addresses | Only if you tick the box on the sign-up page and then choose "Continue with Google": carries the versions of the Terms of Service and Privacy Policy you confirmed reading across the Google sign-in, so that we can record it once your account exists. It holds only document names and version numbers. | 1 hour, or until sign-in completes | Strictly necessary (you asked to create an account). No consent needed. |
wn-calc-currency | Session storage in your browser tab (never sent to us) | Remembers the currency you picked in the savings calculator. Only set when you pick one. | Until you close the tab | Strictly necessary (a choice you made). No consent needed. |
Separately, the website assistant uses a hashed form of your IP address on our servers to limit message rates. That is not stored in your browser, so it is described in the Privacy Policy.
3Cookies set by other companies#
| Name | Set by | Purpose | How long it lasts | Category and consent |
|---|---|---|---|---|
__cf_bm | Cloudflare, on the domain supabase.co, for our database provider Supabase | Protects Supabase's servers against automated abuse (bot management). It may be set when the app loads a file from Supabase, for example the PDF preview on the review screen. | 30 minutes | Strictly necessary (security). No consent needed. WorkNivo does not read or use it. |
| Google account cookies | Google, on Google's own domains | Only if you choose "Continue with Google": Google signs you in on its own pages. | Set by Google's own policy | Outside WorkNivo's control. Google acts as an independent controller (see the Privacy Policy). |
No other company sets cookies through worknivo.app. Our hosting provider, Netlify, sets none.
4Why there is no cookie banner#
EU law (Article 5(3) of the ePrivacy Directive 2002/58/EC and the national laws that implement it) requires consent before a website stores or reads information on your device, except where this is strictly necessary to provide a service you have asked for. Everything listed in "What we use" is stored only to provide something you asked for: signing in and staying signed in, keeping sign-in secure, the plan or Workspace you chose, or a calculator currency you picked. We think each of them falls within that exception, subject to the open questions marked on this page. We still have to tell you about these items, which is what this policy does. [To be confirmed: confirm the exemption for each item, in particular the 400-day sign-in cookie]
Showing a banner for cookies that need no consent would ask you to make a choice that changes nothing, so we do not show one. There is also no cookie-preferences screen, because there are no optional cookies to switch on or off.
If this changes. Before we add any optional cookie or third-party tool (for example analytics, a support-chat widget or embedded videos), we will: ask for your consent before it is loaded; offer "Accept" and "Reject" with equal prominence; let you choose by category where that makes sense; never pre-tick a choice; let you withdraw consent as easily as you gave it, with real effect; and update this policy first. [To be confirmed: plans for analytics or other third-party tools]
5Managing cookies#
- Signing out deletes the sign-in cookies and the Workspace-choice cookie.
- Closing the browser tab deletes the calculator's session-storage item.
- You can view, block or delete cookies in your browser's settings. If you block or delete the cookies we use, you will not be able to sign in or use the app, but the public pages will still work.
Questions about cookies can be sent to support@worknivo.app.
6Changes to this policy#
We update this policy whenever we add, remove or change a cookie or storage item. Each version has a version number and date, and earlier versions are listed in its history. Adding anything that needs consent would also bring the consent controls described above.
Questions about this document
Email support@worknivo.app. Every contact point is listed in the Legal Notice.
Related documents
Version history
- 0.3.0 · 29 October 2026Legal review: wn-legal-intent cookie added to the inventory; the intro animation no longer stores anything in the browser (wn-intro-seen removed), so the no-banner reasoning no longer relies on a 'no privacy impact' item.
- 0.2.0 · 28 October 2026Full draft for legal review: complete inventory, third-party items, why there is no banner, managing cookies.
- 0.1.0 · 28 October 2026Structure created; text not yet drafted.
All documents are listed in the Legal Center.