Cookie Policy
Last updated: 27 May 2026
This Cookie Policy explains how novaverb ("we", "us") uses cookies and similar technologies when you visit novaverb.com (the "Service"). Read alongside our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow the site to remember information (login state, preferences) across pages and visits. "Similar technologies" includes localStorage, sessionStorage, and small browser-API tokens used by single-page apps.
2. Cookies we set
| Name | Purpose | Duration | Category |
|---|---|---|---|
novaverb_session | Authentication / login state | Session (cleared on logout or 2h idle) | Strictly necessary |
XSRF-TOKEN | CSRF protection — verifies form submissions came from your browser | Session | Strictly necessary |
nv-theme | Remembers your light/dark/auto theme choice | 1 year | Preferences |
nv-lang | Remembers your interface language (en / vi) | 1 year | Preferences |
nv-rail-collapsed | Remembers admin sidebar collapsed/expanded state | 1 year | Preferences |
3. Categories explained
Strictly necessary
Required for the Service to function. Without them you can't log in or submit forms safely. Cannot be disabled — disabling them means you can't use novaverb.
Preferences
Remember your UI choices (theme, language, layout). Disabling them just resets these choices to defaults on each visit — no functional loss.
What we do NOT use
We do not set:
- Third-party advertising cookies (Google Ads, Facebook Pixel, etc.)
- Cross-site tracking pixels
- Behavioral profiling cookies
- Re-targeting cookies
4. Third-party cookies on the marketing site only
The public marketing pages (homepage, pricing, blog) may include first-party analytics (Plausible or self-hosted Matomo) to measure aggregate page views. These do not set tracking cookies — they use cookie-less collection via the navigator.sendBeacon API. If you visit the marketing site from inside the EU/UK, a banner gives you the option to opt out of analytics entirely.
5. Inside the authenticated app
Once you sign in, the authenticated dashboard only sets the strictly-necessary + preference cookies above. No marketing analytics fire inside /app/* or /admin/*.
6. How to control cookies
- Browser-level: every browser lets you clear cookies, block third-party cookies, or wipe data on close — see your browser's help
- Service-level: signing out clears your session cookie. Closing your account removes all preference cookies tied to your user record
- Do Not Track: we respect
DNT: 1headers — analytics is automatically opt-out for browsers that send this header
7. Changes to this policy
If we add or change cookies, this page will be updated and the "Last updated" date above will change. We don't currently use a separate consent banner inside the authenticated app because we only use strictly-necessary + preference cookies — under GDPR Article 5(3) those don't require explicit consent.
8. Contact
Questions about cookies? Email contact@novaverb.com.