Cookie Policy

In short. nvivio.com sets no cookies for statistics or advertising. The dashboard remembers your login and your preferences in your browser. On websites that use Nvivio, privacy mode sets no cookie at all; cookie mode sets one, and only after consent.

1. What this policy is about

Cookies are small files a website stores in your browser. Browser storage (localStorage) works the same way. The law treats them the same: storing information on your device, or reading it, needs your consent, unless it is strictly necessary for a service you asked for (article 5(3) of the ePrivacy Directive; in Belgium article 10/2 of the Act of 30 July 2018, in the Netherlands article 11.7a of the Telecommunicatiewet).

2. On nvivio.com

2.1. Statistics without cookies. We measure our own website with Nvivio in privacy mode: no cookies and nothing stored in your browser. See section 2 of the Privacy Policy.

2.2. What we store in your browser. Only what is needed for what you ask, or a preference you set yourself. None of it is sent to third parties.

Name	Type	What for	How long
sb-…-auth-token	localStorage	Keeps you logged in to the dashboard	Until you log out
nvivio-config	localStorage	The dashboard’s own settings, so it starts faster	Until you clear it
nvivio-return	localStorage	The page to return to after you log in with the link	Removed after login
nvivio-lang	localStorage	The language you chose	Until you change or clear it
nvivio-theme	localStorage	Light, dark or system, when you chose it	Until you change or clear it
nvivio-chart, nvivio-visitor-columns, nvivio-shortcuts	localStorage	How you set up charts, the columns in Visitors and keyboard shortcuts	Until you change or clear it
_nvivio_sid with the value 0	Cookie	Only if you object to being measured: remembers that you objected	2 years

2.3. Security. Cloudflare protects our website. When it needs to tell people from bots, it may set a strictly necessary security cookie, such as __cf_bm (30 minutes) or cf_clearance after a check.

2.4. Our administration. Our own staff log in to our administration with a cookie of Cloudflare Access (CF_Authorization). It is never set for customers or visitors.

3. On websites that use Nvivio

The owner of the website chooses the mode per site. Its privacy notice should say which one it uses.

Mode	What is stored on the visitor’s device	Consent
Privacy mode (the default)	Nothing. The script reads only whether the objection cookie below is there.	Not needed for the cookie, see Do I need a cookie banner?
Cookie mode	One first-party cookie, _nvivio_sid, with a random identifier, on the website’s own domain, for about 13 months. The script sets it only after the website calls nvivio.consent(), typically when its cookie banner gets consent.	Needed

Objecting. In both modes, a visitor who unticks the box on the website’s privacy page gets the cookie _nvivio_sid with the value 0, for two years. It only records that objection, so Nvivio no longer counts that visitor. It is strictly necessary to respect your choice.

Global Privacy Control. If your browser sends Global Privacy Control, Nvivio does not measure you, and stores and reads nothing.

nviv.io itself, the address the script and the events go to, sets no cookies.

4. Your choices

You can delete cookies and browser storage in the settings of your browser, and block them for each website. On nvivio.com, deleting sb-…-auth-token logs you out; the other items only reset your preferences. To stop being measured on a website that uses Nvivio, use the box on its privacy page, or switch on Global Privacy Control in your browser.

5. Changes

If we start using another cookie or storage item, we update this page first. The version and date are at the top.

Versions

• 1.0, 25 October 2026: first version.