This Cookie Policy explains how AIURION INC. uses cookies and similar browser technologies when providing EXVIV. A cookie is a small value a website asks a browser to store and return. Local storage is browser storage that is not automatically sent with every request.

01Necessary storage

NamePurposeType and duration
rw_sessionAuthenticates an EXVIV account session. It is HttpOnly, SameSite=Lax, and Secure in production.First-party cookie; up to 30 days.
rw_auth_intentBinds the browser to a requested passwordless sign-in link and helps prevent link misuse.First-party HttpOnly cookie; up to 15 minutes; limited to the authentication callback.
rw_active_workspaceRemembers which authorized workspace to open for a signed-in user.First-party HttpOnly cookie; up to one year.

Necessary storage is required to provide a feature you request, maintain security, or remember your authorized workspace. Blocking it can prevent sign-in or workspace selection from working. Signing out deletes the active EXVIV server session and session cookie.

02Cookie-free analytics

EXVIV uses Umami Cloud to measure anonymous site usage. The tracker does not use cookies, fingerprinting, stable user identifiers, or cross-site tracking. It measures information such as page path and title, referrer, browser, operating system, device type, language, screen size, approximate country, and anonymous visit and session counts.

The tracker runs only on exviv.com, excludes URL query strings and hashes, and honors a browser's Do Not Track setting. EXVIV does not send Umami account email addresses, private workspace content, payment details, or a user-level identifier. EXVIV's site code does not enable session replay, heatmaps, or advertising integrations.

03Stripe and external services

When you leave EXVIV for Stripe-hosted Checkout or the Stripe Customer Portal, Stripe may use its own cookies for payment, fraud prevention, security, and session operation. Those cookies are controlled by Stripe under its own policy, not by EXVIV. A wallet, blockchain explorer, monitored website, or other external service may likewise use its own storage when you visit it.

04Your choices

You can block the Umami script through browser or content-blocking settings, and EXVIV configures it to honor Do Not Track. Blocking anonymous analytics does not prevent use of public pages, accounts, workspaces, or purchases. You can delete or block necessary cookies through browser settings, but doing so can interrupt sign-in and workspace features.

05Changes

We may update this Policy when storage names, providers, or purposes change. We will update the effective date and, when required, ask for a new choice before materially different optional technologies load.