Cookie Policy

Cookies are small values a site asks a browser to return with later requests. This page also covers comparable first-party browser storage used by Authvio. The values usually contain a protected identifier or workflow state, not a readable copy of an identity document.

Authvio uses first-party storage to authenticate sessions, protect forms and redirects, bind verification actions to the right browser, and remember a developer's Test or Live display choice. These functions are needed to provide a requested account, authentication, or verification service. Authvio does not use advertising cookies or sell cookie identifiers.

Authentication and hosted-verification session cookies are marked Secure and use SameSite protections. Sensitive session and OIDC cookies are HttpOnly. The avio_env display choice and avio_csrf browser token must be readable by the relevant client-side interface.

The registration interface may use session storage to carry an email and a recent legal-acceptance marker between phases of the same registration journey. It is removed when the browser session ends. A network protection provider may set a short-lived challenge or bot-control cookie when that protection is activated. Such a cookie is used for traffic integrity, not advertising.

The audited Authvio account, identity-provider, and hosted-verification code does not install advertising pixels or general-purpose third-party analytics cookies. Infrastructure request logs may still contain IP address, user agent, route, response status, and timing as described in the Privacy Policy.

You can inspect, block, or delete cookies in browser settings. Blocking the authentication, CSRF, OIDC, or hosted-verification cookies will prevent the related flow from working. Signing out removes or revokes the relevant Authvio session, while deleting all site data clears remaining browser state.

We update this policy when browser-storage behavior changes. Send a question through the legal and privacy request form. Read this policy with the Privacy Policy.