Effective date: 28 May 2026. We use the smallest possible set of cookies. No ad-tech trackers. No third-party analytics that profile visitors.
| Cookie | Type | Purpose | Lifetime |
|---|---|---|---|
__cf_bm | Strictly necessary | Cloudflare bot management — distinguishes human visitors from bots | 30 minutes |
truvyo_session_key (session storage, not a cookie) | Strictly necessary | Temporary holder for the trial API key during the sign-up → plan-selection flow | Cleared on tab close or after the key is shown |
For traffic measurement, we use Cloudflare's built-in privacy-preserving analytics (no cross-site profiling, no cookies set for analytics purposes). It tells us how many visits each page got, broken down by referrer, country, and device type — never tied to an individual visitor.
When a Customer embeds the Truvyo widget on their own site, the widget runs in the host page's context and is subject to the host's cookie policy. The widget itself sets no third-party cookies and does no cross-site tracking. Conversation state is stored server-side (in the tenant's Cloudflare D1) and keyed by a session-scoped conversationId passed in API responses.
The strictly-necessary cookies above are required for the site to function (bot protection); browsers that block them may experience reduced functionality. There are no optional cookies to opt out of — we don't set any.