Loading...
Last updated:
This Policy explains which cookies and similar technologies the Sieva Service, provided by Sieva s.r.o., uses. It complements the Privacy Policy and applies to all visitors and users of the Service.
Cookies are small text files that a website stores in the user's browser during a visit. They make it possible to remember actions and preferences (such as the selected language or an active session) across visits and pages, improving the experience of using the Service. In addition to classic cookies, we use similar technologies — such as localStorage and sessionStorage — which are subject to the same rules as cookies.
At the time of publication, the Service uses only strictly necessary (Essential) first-party cookies. We do not place third-party cookies and do not integrate third-party tracking scripts.
| Cookie | Category | Purpose | Duration | Type |
|---|---|---|---|---|
| convoflow.ui_locale | Essential | Remembers the selected UI language across sessions | 1 year | First-party |
| convoflow.auth.session.v1 | Essential | User authentication session | 30 days | First-party |
| convoflow.cookie-consent | Essential | Stores consent preferences | 13 months | First-party |
These cookies are necessary for the basic operation of the Service: authentication, displaying the interface in the selected language, and honoring your cookie preferences. The 13-month duration for convoflow.cookie-consent follows the CNIL recommendation and is standard industry practice in the EU.
We classify cookies into three categories, in line with the ePrivacy Directive approach and EDPB guidance:
Essential (strictly necessary). Always active. These cookies provide authentication, persist the selected language, and store your cookie preferences. This category cannot be disabled — the Service cannot function without it. The legal basis is Article 5(3) of the ePrivacy Directive (exemption for strictly necessary cookies); no consent is required.
Analytics (optional). Disabled by default. At the time of publication, these cookies are not used. The category is reserved for Phase 2D, when we plan to introduce privacy-friendly analytics (for example, Plausible or self-hosted PostHog). Before activating, we will update this Policy and request your consent again.
Marketing (optional). Disabled by default. At the time of publication, these cookies are not used. The category is reserved for Phase 2C.3 — public marketing pages and possible retargeting. Before activating, we will update the Policy and request consent.
On your first visit, a consent banner appears with the option to accept or reject optional categories. You can change your preferences at any time via the "Cookie preferences" link in the site footer.
You can also clear cookies through your browser — instructions are available on the Chrome, Firefox, Safari, and Edge websites. Note that clearing cookies will sign you out and reset user preferences. Disabling Essential cookies at the browser level will make the Service unusable.
We honor the browser's Do Not Track (DNT) signal: when present, optional cookies are automatically disabled.
At the time of publication, the Service does not use third-party cookies or third-party tracking scripts.
This will change when Stripe is enabled for payment processing (Phase 2A) and when privacy-friendly analytics are introduced (Phase 2D). In both cases, we will update this Policy, expand the cookie table, and request your consent for optional categories again before activation.
The Policy is versioned via the version field in the convoflow.cookie-consent cookie. When the version is incremented (for example, when new subprocessors or cookie categories are added), any prior consent is treated as invalid — the consent banner will appear again, and we will request updated consent.
A version history of the Policy is available on request via privacy@sieva.eu. We notify Users of material changes by email and via an in-Service banner at least 30 days before they take effect.