Cookie Policy

This Cookie Policy describes the cookies and similar browser-storage technologies used by Orvani, in line with the EU ePrivacy Directive (2002/58/EC, Article 5(3)) and the GDPR.

1. Summary

We use a small number of first-party, strictly necessary browser entries that are required to run the service (for example, to remember your quiz state and your list of readings). Under Article 5(3) of the EU ePrivacy Directive, storage that is strictly necessary to provide a service the user has explicitly requested is exempt from consent, but we list it here for transparency.

By default we set only these strictly necessary entries. If you Accept in our cookie notice, we additionally load Google Analytics (analytics cookies) to measure traffic and the Meta Pixel (advertising cookies) for advertising measurement; if you Reject, only the strictly necessary storage above is kept. You can change your mind at any time. Before you accept marketing cookies we do not set any advertising or Meta-Pixel cookies.

2. Consent for non-essential storage

Strictly necessary storage runs without consent. Any non-essential technology (A/B testing, analytics, the Meta pixel, advertising or attribution) requires your prior opt-in consent:

• It is off by default and is not loaded before you consent.
• You can withdraw consent at any time via the cookie notice, with the same ease as giving it; we then stop using that storage.
• A reject option is presented with the same prominence as accept.

3. What we store in your browser

• kk_client_id — first-party cookie. An anonymous browser identifier (UUID) linking server-side analytics (such as payment events) to the same browser session; contains no name, email or other personal data. Retention: 2 years. Essential.
• kk.landing_variant — first-party cookie. Remembers your A/B/C landing-page variant so you are not moved to a different experiment on return. Retention: 30 days. Essential.
• kk.variant — sessionStorage. The A/B/C reading tone for the current session. Retention: until the tab is closed. Essential.
• kk.teaser.<sessionId> — sessionStorage. Caches the introductory reading so no extra request is needed after loading the analysis page. Retention: until the tab is closed. Essential.
• kk.readings — localStorage. Your list of past readings (last 20) so you can open them later; stored only in your browser. Retention: until you delete it. Essential.
• kk.consent.v1 — localStorage. Remembers that you have seen the cookie notice. Retention: 12 months. Essential.
• _ga — first-party Google Analytics cookie. Distinguishes visitors for aggregate traffic measurement. Set only after you accept analytics cookies. Retention: 2 years. Non-essential.
• _ga_<id> — first-party Google Analytics cookie. Persists session state for a specific Analytics property. Set only after you accept analytics cookies. Retention: 2 years. Non-essential.
• _fbp — first-party Meta Pixel cookie. Identifies your browser to Meta for advertising measurement and conversion attribution. Set only after you accept marketing cookies. Retention: ~90 days. Non-essential.
• _fbc — first-party Meta Pixel cookie. Stores the Facebook click identifier (fbclid) from an ad click so a later conversion can be attributed to that ad. Set only after you accept marketing cookies. Retention: ~90 days. Non-essential.

4. Third-party services

We download the Cormorant Garamond, Inter and Italiana fonts at build time (next/font) and serve them from our own domain, so no request is made to fonts.googleapis.com during your visit. After you accept analytics cookies, we load Google Analytics 4 (provided by Google Ireland Limited) to measure aggregate site traffic; it sets the _ga and _ga_<id> cookies listed above and may transfer data to Google LLC (USA) under the EU Standard Contractual Clauses (Art. 46 GDPR) — see the Privacy Policy. Before consent it is not loaded.

After you accept marketing cookies, we additionally load the Meta Pixel and use the Meta Conversions API (both provided by Meta Platforms Ireland Limited) for advertising measurement — that is, to record conversion events (such as a completed purchase) so we can measure and optimise our advertising on Facebook and Instagram. The Pixel sets the _fbp and _fbc cookies listed above (~90-day retention) and shares event data — including a SHA-256-hashed version of your email address — with Meta. Data may be transferred to Meta Platforms, Inc. (USA) under the EU Standard Contractual Clauses (Art. 46 GDPR) — see the Privacy Policy. Before you accept marketing cookies, the Meta Pixel is not loaded and no conversion data is sent to Meta.

In server responses we do not set first-party HTTP cookies. Our hosting provider (Vercel) may, in certain cases (for example preview deployments), set technically necessary session cookies; these always come from the *.vercel.app domain and contain no personal data.

5. How to delete your data and withdraw consent

All entries above stay only in your browser. You can delete them at any time:

• on the My readings page, click "Delete all readings";
• in your browser settings, clear site data (or localStorage and sessionStorage) for this domain;
• use private browsing (Incognito) — all storage is cleared automatically when you close the window.

To withdraw any future consent to non-essential storage, reopen the cookie notice and change your choice.

6. Changes

Optional analytics cookies (Google Analytics) and marketing cookies (the Meta Pixel) are set only after your explicit consent in the cookie notice. If we add any further optional cookie in the future, we will likewise ask for your explicit prior consent before setting it. You can withdraw consent at any time.

Questions about cookies? Write to us at info@askorvani.com.