Draft for review. This document has not yet been reviewed by a solicitor and may change before Tenvara is generally available.
This policy explains the cookies and similar browser storage used on www.tenvara.io and kb.tenvara.io. We keep it simple: we only use what is strictly necessary to make the sites work and remember your theme. We do not use analytics, advertising or tracking cookies, and we do not allow third parties to set them on our sites.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as the browser's local storage, let a site keep small pieces of information on your device. Under the Privacy and Electronic Communications Regulations 2003 (and the equivalent EU rules), sites must ask for consent before using cookies, except where they are strictly necessary to provide a service you have asked for.
Cookies we use
All of the cookies below are strictly necessary, so they do not need your consent and there is no cookie banner. They are set by Tenvara (first party) and are never used to track you across other websites.
| Name | Type | Purpose | Duration |
|---|---|---|---|
tenvara-session |
Strictly necessary cookie | Identifies your browser session so you stay signed in to your account and forms and orders work as you move between pages. Marked HttpOnly (not readable by scripts) and sent only over HTTPS | Two hours after your last activity, or when you sign out |
XSRF-TOKEN |
Strictly necessary cookie | A random security token that protects forms and account actions against cross-site request forgery, where another site tries to submit a request as you | Two hours, renewed as you use the site |
Local storage we use
| Key | Purpose | Duration |
|---|---|---|
theme |
Remembers whether you chose the light or dark theme. It stays in your browser and is never sent to us | Until you clear it or your browser storage |
Third parties
Payments are handled on pages provided by Stripe, which sets its own strictly necessary cookies for fraud prevention and to complete your payment. Those cookies are covered by Stripe's cookie policy.
Traffic to our sites passes through Cloudflare, which protects us against attacks. Cloudflare may set strictly necessary security cookies (such as __cf_bm) to tell people apart from automated traffic. These are not used for analytics or advertising. [To be confirmed once the Cloudflare configuration is final.]
Managing cookies
You can block or delete cookies in your browser settings. If you block the cookies above, you will not be able to sign in to your account or submit forms, but you can still read the public website and knowledge base. Clearing your browser's site data also removes the theme preference.
Changes
If we ever introduce cookies that are not strictly necessary, such as analytics, we will update this policy and ask for your consent first.
Contact
Questions about this policy can be sent to privacy@tenvara.io. Our privacy notice explains how we handle personal data more generally.