Cookie Policy
Valido Insight currently uses only necessary cookies and browser storage. This policy explains exactly what they do and how long they last.
Effective from
ContentsShow 8 sectionsHide
Optional Google Analytics statistics
When enabled, Google Analytics 4 by Google Ireland Limited measures public-page visits only after you accept statistics. Google receives page addresses without query strings or fragments, the referring domain, technical browser and device data, network information including your IP address, and a random identifier. We do not send account, project or report data. Analytics is not loaded in sign-in, dashboards or reports. Advertising features and enhanced event measurement are disabled. Google retains detailed event data for 2 months and user data for 14 months, with the user retention period resetting on new activity. Standard aggregated reports may remain longer. Data may be processed outside the EU/EEA under Google processing terms and applicable transfer safeguards.
Your choice is stored as valido-analytics-consent-v1 in localStorage for up to 180 days. After acceptance, _ga and _ga_* cookies last up to 180 days without automatic renewal. No Google analytics script or request is loaded before acceptance or after rejection. Change or withdraw consent using Cookie settings on public pages; rejecting clears Analytics cookies and reloads the page to stop measurement.
1. Who is responsible
Valido Insight by Stefan Hilbert, Stationsvej 6, 9362 Gandrup, is responsible for the use of cookies and similar browser technologies described here. Contact: kontakt@valido.dk.
2. What cookies and browser storage are
Cookies are small values stored by a browser. Local storage keeps preferences on the device. HttpOnly cookies cannot be read by browser scripts and are used for sensitive session functions. These technologies do not contain your password.
3. Necessary technologies
Valido Insight currently uses only technologies necessary to provide requested functionality:
| Name | Purpose | Duration |
|---|---|---|
| sb-<project-id>-auth-token and PKCE verifier | Supabase login, session, confirmation, and recovery. | Session-dependent; technical maximum up to 400 days. The temporary verifier is normally removed after callback. |
| valido-password-recovery-grant | Secure permission for the final password-reset step. | Up to 15 minutes. |
| valido-annual-grant-activation-repair | Signed, short-lived repair of a verified invitation activation. | Up to 10 minutes. |
| valido-report-share | Password-protected access to a shared report. | Up to one hour; the share itself expires within 30 days. |
| valido-locale | Remembers Danish or English. | Up to one year. |
| valido-theme and dashboard browser preferences | Remembers theme and navigation focus on this device. | Until changed or browser storage is cleared. |
| Legacy local-user/demo-plan values | Ignored and removed during sign-in; never grants account access. | Up to 30 days if left by an older version. |
4. Third-party technologies
Supabase authentication sets the session technologies above. Stripe Checkout and the Stripe customer portal may set strictly necessary security and fraud-prevention cookies on Stripe's domain when you choose those functions. Connected Google services operate on Google's domains. We do not currently place advertising or cross-site analytics cookies on Valido Insight.
5. Consent and cookie banner
Necessary technologies do not require opt-in consent where they are essential to deliver a service requested by the user. When optional statistics are enabled, public pages show equally prominent accept and reject buttons. Analytics remains blocked until acceptance. Withdraw using Cookie settings. If optional analytics, marketing, or personalization technologies are introduced, we will update this policy and obtain consent before placing them where required.
6. How to control or delete technologies
You can delete cookies and local storage in your browser settings. Blocking necessary session cookies prevents sign-in and protected report access. Signing out clears active authentication state; deleting an account follows the retention process in the Privacy Policy.
7. Changes and contact
We review this list when authentication, hosting, payment, security, or analytics functionality changes. The effective date appears above. Questions can be sent to kontakt@valido.dk.