Cookie Policy

Scrivio uses two cookies, both functional, and no tracking or advertising cookies at all. That is why there is no consent banner.

1. What a cookie is here

A small piece of data stored by your browser and returned to us on each request. We also use your browser's local storage for two interface preferences, which never leaves your device.

2. Session cookie (strictly necessary)

When you log in we set a `scrivioSessionId` cookie identifying your session. It is HTTP-only, so scripts cannot read it, and it is required for the application to work at all — without it there is no way to know that a request is yours. It expires when the session ends.

3. Language cookie

If you choose a language explicitly, we remember it in a `lang` cookie so pages are served in that language on your next visit. It contains nothing but a two-letter language code. Your theme choice and interface language are additionally kept in local storage on your device.

4. Audience measurement

We measure the audience of the public site on our own servers, without cookies and without writing anything to your browser. For each page you read, your browser sends a request describing the page (its address, its language, the site you came from, the campaign parameters and click identifiers of the address) and your browser (screen and window size, pixel density, light or dark theme, reduced-motion preference, time zone, languages, touch screen, number of cores, memory, connection type, data saver, protocol), then the performance of the load, how long the page stayed visible, how far you scrolled and how many times you clicked, and a few specific interactions: a click on “Get started free”, a use case or a FAQ question opened, the pricing section seen, a link to another site, the sign-up form started, a change of language or theme, a JavaScript error. Our server adds your IP address, your user agent, the language your browser announces and, if you are signed in, your account. A hash of the IP address and the user agent lets us recognise a returning browser, and the IP address lets us place the visit (country, region, city, the organisation of the network). When you create an account, we attach to it the first and the last visit of your browser in the previous 90 days. This data stays on our servers in Switzerland, is passed to no third party and is kept for three years. If your browser sends the Do Not Track or Global Privacy Control signal, it sends us nothing, and our server ignores any measurement request carrying either signal.

5. Geolocation

IP geolocation relies on the “IP to City Lite” and “IP to ASN Lite” databases of DB-IP (db-ip.com), published under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).

6. Why there is no consent banner

Consent is required for cookies and browser storage that are not strictly necessary — chiefly advertising and tracking ones. We do not set any: the audience measurement described above writes nothing to your browser, rests on our legitimate interest in knowing the audience of the site, and is refused by your browser’s Do Not Track or Global Privacy Control signal. Rather than show you a banner as decoration, we designed the site not to need one, and we would like to keep it that way.

7. Controlling cookies

You can delete or block cookies in your browser settings. Blocking the session cookie will prevent you from logging in, since it is what identifies your session. Blocking the language cookie only means the site will detect your language from your browser each time. To refuse the audience measurement, turn on Do Not Track or Global Privacy Control in your browser: it will send us no measurement at all.