Cookie Policy
Last Updated: June 16, 2026 • Version 1.0 • ePrivacy & GDPR Compliant
Table of Contents
GDPR Compliance
Necessary Stripe & Supabase session cookies load automatically to protect and operate payments/logins. Analytical and marketing cookies require prior consent.
1. What Are Cookies
Cookies are small text files stored on your computer or mobile device when you load websites in a browser. They are widely used to make websites function, improve load performance, and provide transactional data to the website owners. Cookies can be first-party (set by Invollo) or third-party (set by services we utilize).
Cookies are classified into "Session Cookies" (which are deleted automatically when you close your browser) and "Persistent Cookies" (which remain stored on your device until they expire or are cleared).
2. How We Use Cookies
We use cookies to maintain your active account session, verify billing transactions via Stripe, record user preferences, and attribute marketing campaigns.
Strictly Necessary
Essential for secure sign-ins, managing subscription states, and preventing fraud on Stripe checkouts.
Analytical
Allows us to measure traffic, monitor server loads, and trace app errors to optimize performance.
Marketing & Ads
Used to track performance of Google Ads and Meta Pixel campaigns, ensuring opt-in compliance.
3. Strictly Necessary Cookies
These cookies are automatically set upon page load or interaction, as they are legally exempt from opt-in consent rules under the ePrivacy Directive (being essential to deliver the requested service):
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| __stripe_mid, __stripe_sid | Stripe, Inc. | Stripe uses these cookies to detect and prevent credit card fraud. Essential for securing checkouts. | 1 year / 30 mins |
| sb-access-token, sb-refresh-token | Supabase / Invollo | Stores JWT credentials to keep users authenticated as they navigate the app workspace. | Session / 7 days |
| invollo-cookie-consent | Invollo | Saves your specific choices regarding cookie categorizations. | 1 year |
4. Analytics & Marketing Cookies
We only place these tracking cookies if you explicitly click "Accept All" or consent to them on our cookie settings banner:
| Cookie Name / Domain | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _gid | Google Analytics | Compiles anonymized statistics on page visits, durations, and referral channels. | 2 years / 24 hours |
| _fbp, fr | Meta Platforms, Inc. | Attributes conversion events from Facebook and Instagram ads to optimize campaign performance. | 3 months |
| brevo_track_session, resend_id | Brevo / Resend | Traces newsletter subscribe submissions, email clicks, and customer engagement. | Session / 6 months |
6. Policy Updates
We may update this Cookie Policy from time to time in response to changes in tracking technologies, new marketing tools, or regulatory updates. We encourage you to review this policy periodically to stay informed about our tracking practices.
If you require further information regarding cookies used on Invollo, please reach out to hello@invollo.com: