Cookie Policy
Valido Insight currently uses only necessary cookies and browser storage. This policy explains exactly what they do and how long they last.
Effective from
ContentsShow 7 sectionsHide
1. Who is responsible
Valido Insight by Stefan Hilbert, Stationsvej 6, 9362 Gandrup, is responsible for the use of cookies and similar browser technologies described here. Contact: kontakt@valido.dk.
2. What cookies and browser storage are
Cookies are small values stored by a browser. Local storage keeps preferences on the device. HttpOnly cookies cannot be read by browser scripts and are used for sensitive session functions. These technologies do not contain your password.
3. Necessary technologies
Valido Insight currently uses only technologies necessary to provide requested functionality:
| Name | Purpose | Duration |
|---|---|---|
| sb-<project-id>-auth-token and PKCE verifier | Supabase login, session, confirmation, and recovery. | Session-dependent; technical maximum up to 400 days. The temporary verifier is normally removed after callback. |
| valido-password-recovery-grant | Secure permission for the final password-reset step. | Up to 15 minutes. |
| valido-annual-grant-activation-repair | Signed, short-lived repair of a verified invitation activation. | Up to 10 minutes. |
| valido-report-share | Password-protected access to a shared report. | Up to one hour; the share itself expires within 30 days. |
| valido-locale | Remembers Danish or English. | Up to one year. |
| valido-theme and dashboard browser preferences | Remembers theme and navigation focus on this device. | Until changed or browser storage is cleared. |
| Legacy local-user/demo-plan values | Ignored and removed during sign-in; never grants account access. | Up to 30 days if left by an older version. |
4. Third-party technologies
Supabase authentication sets the session technologies above. Stripe Checkout and the Stripe customer portal may set strictly necessary security and fraud-prevention cookies on Stripe's domain when you choose those functions. Connected Google services operate on Google's domains. We do not currently place advertising or cross-site analytics cookies on Valido Insight.
5. Consent and cookie banner
Necessary technologies do not require opt-in consent where they are essential to deliver a service requested by the user. For that reason, the service does not currently show a consent banner. If optional analytics, marketing, or personalization technologies are introduced, we will update this policy and obtain consent before placing them where required.
6. How to control or delete technologies
You can delete cookies and local storage in your browser settings. Blocking necessary session cookies prevents sign-in and protected report access. Signing out clears active authentication state; deleting an account follows the retention process in the Privacy Policy.
7. Changes and contact
We review this list when authentication, hosting, payment, security, or analytics functionality changes. The effective date appears above. Questions can be sent to kontakt@valido.dk.