Cookie policy
WebValet uses very few cookies. There are no advertising cookies and no third-party tracking pixels. This page lists everything, including local storage, so you can decide what to allow.
A cookie is a small text file a website stores in your browser so it can recognise you on the next page or the next visit. Local storage is similar but is never sent to the server automatically. "Strictly necessary" ones make the site work; the rest need your consent where the law requires it (for example in the EU and UK).
| Name | Set by | Purpose | Type | Lasts |
|---|---|---|---|---|
| wv_session | WebValet | Keeps you signed in to the dashboard | Strictly necessary | 30 days, renewed while you use it |
| wv_oauth | WebValet | Protects the Google sign-in step from forgery | Strictly necessary | 10 minutes |
| wv_consent | WebValet | Remembers your cookie choice | Strictly necessary | 12 months |
| wv_audits | WebValet (local storage) | Remembers the audits you ran on this device so you can find them again | Functional | Until cleared |
| cf_clearance, __cf_bm | Cloudflare | Security and bot management for the site | Strictly necessary | 30 minutes to 1 year |
| cf-turnstile-* | Cloudflare Turnstile | Proves you are not a bot before running a free audit | Strictly necessary | Minutes |
| ph_* | PostHog | Product analytics: pages viewed, audit steps completed, sign-up and checkout funnel | Analytics (consent) | 12 months |
| polar_* | Polar (checkout page only) | Runs the hosted checkout | Strictly necessary on Polar's domain | Set by Polar |
Emails from WebValet contain a tracking pixel that tells us whether a Monday report was opened, so we can stop sending reports nobody reads. Alerts do not include one.
- Use the cookie banner shown on your first visit in regions that require consent, or the Cookie settings link in the footer, to turn analytics off at any time.
- We honour the Global Privacy Control browser signal: when it is on, analytics cookies are not set.
- Block or delete cookies in your browser settings. Blocking the wv_session cookie signs you out of the dashboard.
- Email privacy@webvalet.app if you want help.
Changes
If we add a cookie, it appears in the table above with a new date at the top of this page. New non-essential cookies trigger a fresh consent prompt.