This Cookie Policy explains how AIURION INC. uses cookies and similar browser technologies when providing EXVIV. A cookie is a small value a website asks a browser to store and return. Local storage is browser storage that is not automatically sent with every request.

01Necessary storage

NamePurposeType and duration
rw_sessionAuthenticates an EXVIV account session. It is HttpOnly, SameSite=Lax, and Secure in production.First-party cookie; up to 30 days.
rw_auth_intentBinds the browser to a requested passwordless sign-in link and helps prevent link misuse.First-party HttpOnly cookie; up to 15 minutes; limited to the authentication callback.
rw_active_workspaceRemembers which authorized workspace to open for a signed-in user.First-party HttpOnly cookie; up to one year.
exviv_cookie_consent_v1Stores whether optional analytics were accepted or declined so EXVIV can honor the choice.First-party local storage; retained until the choice is replaced or browser storage is cleared.

Necessary storage is required to provide a feature you request, maintain security, or remember a privacy choice. Blocking it can prevent sign-in, workspace selection, or preference storage from working. Signing out deletes the active EXVIV server session and session cookie, but does not automatically clear an analytics choice.

02Optional analytics

EXVIV includes Google Tag Manager container GTM-THWV6LF2, but the container is blocked from loading until analytics consent is granted. On this Policy's effective date, the published container contained no active tags. Because a container can be updated remotely, we still treat it as optional and consent-gated.

If analytics tags are later enabled, they may process page URL, referral information, browser and device details, approximate region derived from network information, and interaction events. Google Analytics commonly uses cookies beginning with _ga; exact names and durations depend on the published configuration. We will not intentionally configure advertising, remarketing, or cross-site profiling tags without updating this Policy and providing any additional legally required choice.

03Stripe and external services

When you leave EXVIV for Stripe-hosted Checkout or the Stripe Customer Portal, Stripe may use its own cookies for payment, fraud prevention, security, and session operation. Those cookies are controlled by Stripe under its own policy, not by the EXVIV cookie control. A wallet, blockchain explorer, monitored website, or other external service may likewise use its own storage when you visit it.

04Your choices

On a first visit, you can accept optional analytics or continue with necessary storage only. Refusing optional analytics does not prevent use of public EXVIV pages, accounts, workspaces, or purchases. You can change the choice at any time below. Revoking consent prevents future loading and attempts to remove EXVIV-accessible Google Analytics cookies from this domain; it cannot retract information already processed or clear storage controlled by another domain.

You may also delete cookies and local storage through browser settings. Browser Do Not Track is not standardized, but optional analytics remain off until consent. Where Global Privacy Control is available, EXVIV uses it as a direction to keep optional analytics disabled unless applicable law permits and you later make a specific contrary choice.

05Changes

We may update this Policy when storage names, providers, or purposes change. We will update the effective date and, when required, ask for a new choice before materially different optional technologies load.