Legal
Cookie Policy
Last updated: March 1, 2026
1. Introduction
This Cookie Policy explains what cookies are, how Ovvoc ("we," "us," or "our") uses them on our website and platform, and your choices regarding their use. This policy should be read alongside our Privacy Policy, which provides comprehensive details on how we collect, use, and protect your personal data.
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function correctly, enhance security, and provide information to site operators. Cookies may be "session" cookies (deleted when you close your browser) or "persistent" cookies (remaining on your device for a defined period or until you delete them).
2. Cookies We Use
Ovvoc uses a minimal set of cookies, all of which are strictly necessary for the Service to function. We do not use any cookies for analytics, advertising, or tracking purposes.
| Cookie | Purpose | Duration | Type | Provider |
|---|---|---|---|---|
| Ovvoc_session | Dashboard authentication (JWT access token) | Session (15 minutes) | Essential, HttpOnly, Secure, SameSite=Lax | Ovvoc |
| Ovvoc_refresh | Session renewal (refresh token) | 7 days | Essential, HttpOnly, Secure, SameSite=Strict, Path=/api/v1/auth | Ovvoc |
| Paddle checkout cookies | Payment processing during checkout | Session | Essential, set by Paddle.js overlay | Paddle |
3. What We Do NOT Use
We believe in minimal data collection. Ovvoc does not use any of the following:
- Analytics cookies — We do not use Google Analytics, Mixpanel, Amplitude, Plausible, or any other analytics tracking service.
- Advertising cookies — We do not serve ads and do not use cookies from any advertising network or demand-side platform.
- Social media cookies — We do not embed social media widgets, share buttons, or login buttons that set third-party cookies (aside from our OAuth authentication flow, which does not use persistent cookies).
- Tracking pixels — We do not embed tracking pixels, web beacons, clear GIFs, or similar technologies from any third party.
- Browser fingerprinting — We do not collect or process device fingerprints, canvas fingerprints, or any other form of probabilistic identification.
- Cross-site tracking — We do not participate in cross-site tracking, retargeting, or behavioral advertising of any kind.
4. Essential Cookies Only
All cookies used by Ovvoc are classified as "strictly necessary" under applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the ePrivacy Directive. Strictly necessary cookies are those that are essential for the basic functioning of the website and cannot be switched off without rendering core features — such as authentication and payment processing — inoperable.
Under GDPR and the ePrivacy Directive, strictly necessary cookies do not require user consent. However, we disclose their use here for full transparency, so you understand exactly what data is stored on your device when you use Ovvoc.
We do not display a cookie consent banner because we do not use any cookies that require consent. If we ever introduce non-essential cookies in the future, we will update this policy, provide advance notice, and implement an appropriate consent mechanism before doing so.
5. Managing Cookies
Most web browsers allow you to control cookies through their settings. You can typically configure your browser to block all cookies, accept all cookies, or notify you when a cookie is set. The specific steps vary by browser:
- Google Chrome — Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox — Settings > Privacy & Security > Cookies and Site Data
- Apple Safari — Settings > Privacy > Manage Website Data
- Microsoft Edge — Settings > Cookies and site permissions > Cookies and site data
Please note: If you block or delete the essential cookies used by Ovvoc (Ovvoc_session and Ovvoc_refresh), you will be unable to log in to the dashboard or maintain an authenticated session. The Service requires these cookies to function. Blocking Paddle checkout cookies will prevent you from completing payment transactions.
6. Third-Party Cookies
The only third-party cookies that may be set on your device when using Ovvoc are those set by Paddle.js during the checkout process. When you initiate a subscription purchase, the Paddle checkout overlay loads within our page and may set cookies necessary for payment processing, fraud prevention, and transaction completion. These cookies are set by Paddle, not by Ovvoc, and are subject to Paddle's Cookie Policy.
Paddle checkout cookies are only set when you actively initiate a purchase. They are not set during regular browsing of the Ovvoc website or use of the dashboard.
7. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes — particularly the introduction of non-essential cookies — we will provide at least 30 days' advance notice via email or prominent notice on our website before the changes take effect. The "Last updated" date at the top of this page indicates when this policy was most recently revised.
Your continued use of the Service after any changes to this Cookie Policy constitutes your acceptance of those changes.
Contact
If you have questions about this Cookie Policy, please contact us at [email protected].