Cookie policy
Last updated: October 18, 2026
1. What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It lets the site remember certain information about your visit, to make later visits easier and the site more useful.
2. Cookies used by Qaviar
Qaviar only uses cookies that are strictly necessary for the service to work. No advertising or third-party tracking cookies are used.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sb-*-auth-token | Supabase authentication session | 1 hour (renewable) | Strictly necessary |
| sb-*-auth-token-code-verifier | PKCE verification for OAuth | Session | Strictly necessary |
| NEXT_LOCALE | Language preference (fr/en) | 1 year | Strictly necessary |
| qv_org | Active organization for an account that belongs to several organizations | 1 year | Strictly necessary |
| qv_login_next | Return page after signing in with Google (invitation in progress) | 10 minutes | Strictly necessary |
| qv_slack_oauth | Protection of the connection to Slack | 10 minutes | Strictly necessary |
| figma_oauth_state | Protection of the connection to Figma | 10 minutes | Strictly necessary |
| qv-theme (local storage) | Theme preference (light/dark) | Until deleted by the user | Strictly necessary |
| qv_invitation_token (session storage) | Invitation being accepted, kept while signing in | Until the tab is closed | Strictly necessary |
| qv_org_switch (session storage) | Last organization switch attempted, to avoid a loop | Until the tab is closed | Strictly necessary |
3. Third-party cookies
Qaviar uses no advertising cookies, no tracking pixels and no third-party analytics tool (no Google Analytics, no Facebook Pixel, no Hotjar). Your browsing on Qaviar is not tracked by any third party.
The only third-party services are:
- Stripe: may place cookies during the payment process, on the payment pages only. These cookies are governed by Stripe’s privacy policy.
- Supabase Auth: places the authentication cookies listed above, needed to keep the session open.
4. Managing cookies
Since Qaviar only uses cookies that are strictly necessary for the service to work, no consent banner is shown, in accordance with Article 82 of the French Data Protection Act (loi Informatique et Libertés) and the CNIL’s recommendations.
You can still set your browser to refuse cookies. However, refusing the authentication cookies will make the service unusable (you will not be able to sign in or stay signed in).
Cookie settings by browser:
- Chrome: chrome://settings/cookies
- Firefox: about:preferences#privacy
- Safari: Settings > Privacy
- Edge: edge://settings/privacy
5. Changes to this policy
If Qaviar were to add new cookies (analytics cookies in particular), this policy would be updated and a consent mechanism would be put in place as required by law.
6. Contact
For any question about cookies: dpo@qaviar.io