What this policy covers
This policy explains the cookies and similar technologies used on this website, and how to control them. It sits alongside our Privacy Policy.
"Cookies" here includes anything that stores or reads information on your
device — cookies proper, and browser storage such as localStorage.
The UK rules (the Privacy and Electronic Communications Regulations, "PECR")
apply to all of them equally.
The short version. When you sign in, this site sets two strictly necessary cookies: one holds your session — no script on the page can read it — and the other protects your actions against requests from other websites. It keeps one item in browser storage: your cookie choice. Nothing else is written to your browser. We do not use any analytics, advertising or tracking cookies, and no third party sets anything on this site.
What we actually store
This is the complete list. If it is not here, we are not storing it.
| Name | Purpose | Type | Duration | Category |
|---|---|---|---|---|
__Host-torvane_session |
Keeps you signed in to your dashboard. Contains your signed session token only. Marked HttpOnly (no script on the page can read it), Secure (sent over HTTPS only) and SameSite=Lax (not sent with requests other websites start). | Cookie (first-party) | 12 hours, or until you sign out | Strictly necessary |
__Host-torvane_csrf |
A random value the dashboard sends back with every change you make, so a request started by another website cannot act as you. Holds nothing about you. | Cookie (first-party) | 12 hours, or until you sign out | Strictly necessary |
aide_cookie_consent |
Remembers the choice you made in the cookie banner, including which categories you allowed, when, and which version of the notice you saw — so we do not ask again and can evidence your choice. | localStorage |
Until you change it or clear your browser storage | Strictly necessary |
All three are strictly necessary and therefore exempt from the consent requirement under PECR regulation 6(4) — a sign-in session and its protection are required to deliver a service you asked for, and a record of your cookie choice is required to honour it.
Until 24 September 2026 the session token was kept in browser storage as
aide_token. The dashboard now moves you to the session cookie the
next time you open it, without signing you out, and deletes that entry.
Two dashboard conveniences are kept with your account on our servers,
not in your browser: the last five questions you asked Torvane (shown
only to you, and cleared when you sign out) and whether you have seen the short
product tour. Earlier versions of the dashboard kept these in browser storage
(torvane_recent_q:… and aide_tour_done); the dashboard now
deletes those entries from your browser when it loads.
Analytics and marketing cookies
We do not currently use analytics or marketing cookies. There is no Google Analytics, no advertising pixel, no session recording and no cross-site tracking on this site. No third-party script runs here at all — every script and font is served from our own domain.
If we introduce analytics in future, it will be off until you turn it on:
| Category | Status today | Default | Category |
|---|---|---|---|
| Analytics | Not currently used | Off until you consent | Optional |
| Marketing / advertising | Not currently used | Off until you consent | Optional |
The consent banner already offers switches for these categories, and our code checks your choice before loading anything non-essential. Nothing in an optional category will ever run before you have said yes.
How to control cookies
On this site
Use Cookie settings — available here and in the footer of every page — to review your choice, change it, or withdraw consent. Withdrawing is as easy as giving it: the same panel, one click, no explanation required.
We ask again if the categories or their purposes change, because a new purpose needs fresh consent.
In your browser
You can block or delete cookies and site storage in your browser settings. If you clear the cookies and storage listed above you will simply be signed out and asked about cookies again. Blocking strictly necessary storage will stop the dashboard from keeping you signed in.
Guidance for each major browser is available from its publisher, and the ICO publishes plain-English advice on cookies and similar technologies.
Changes to this policy
If we add or change what we store, we will update the table above and, where the change needs your consent, ask you again through the banner. The "last updated" date reflects the current version.
Questions: privacy@torvane.ai.