Cookie Policy

Last updated: 4 August 2026

This page lists every cookie and browser-storage key Growvo.AI uses, what each one is for, and how long it lasts.

1. The short version

We do not use advertising cookies, third-party tracking cookies, or advertising pixels. We load no Google Analytics, no Google Tag Manager, no Meta Pixel, and no third-party session-recording or heatmap tools.

Everything we store in your browser is first-party and falls into one of two groups: it is strictly necessary to sign you in and keep you secure, or it remembers a preference you chose yourself, such as your language or dark mode. That is why you are not shown a cookie consent banner — there is no tracking to consent to.

2. Strictly necessary cookies

These make sign-in work and protect the sign-in process from attack. The Service cannot function without them, so they are set without asking. All of them are first-party.

Name	Purpose	Lifetime
growvo_rt	Holds your refresh token so your session survives a page reload without keeping a long-lived token in JavaScript. HttpOnly, SameSite=Lax, and Secure in production.	Up to 7 days
growvo_admin_rt	The equivalent refresh cookie for the separate admin console. Only set if you sign in there.	Up to 7 days
growvo_oauth_state	A one-time random value that ties a social sign-in redirect back to the browser that started it, which is what prevents cross-site request forgery on the OAuth flow.	Minutes — cleared once the sign-in completes
growvo_sso_state	The same protection for enterprise single sign-on.	Minutes — cleared once the sign-in completes

3. Preference cookies

These remember a choice you made. Clearing them only resets that choice — nothing breaks.

Name	Purpose	Lifetime
growvo_locale	The interface language you selected. Without it we fall back to your browser’s Accept-Language header.	Up to 1 year
growvo_currency	The currency prices are displayed in. Display only — it does not change what you are charged.	Up to 1 year

4. Browser storage (not cookies)

We also use localStorage and sessionStorage for interface state. These are never sent to our servers with each request the way a cookie is — they stay in your browser.

Key	Purpose	Lifetime
growvo-theme	Whether you chose light or dark mode. Read before first paint so the page does not flash the wrong theme.	Until you clear it
growvo.nav.openGroup	Which sidebar section you left expanded.	Until you clear it
growvo_ref	A referral code from a ?ref= link, so the person who referred you is credited if you sign up. This is the only key that exists for attribution rather than for operating the interface.	Until you clear it, or until sign-up consumes it
Email-verification dismissal	Remembers that you dismissed the “please verify your email” banner, so it does not reappear on every page. Keyed per user.	Until the browser tab is closed

5. Third parties that may set cookies

We do not embed third-party trackers. Two third parties can set their own cookies, and only in a specific context:

Stripe — when you open the checkout or billing portal, Stripe sets cookies on its own pages for payment processing and fraud prevention, governed by Stripe's privacy policy.
Facebook and Google — if you choose to sign in with them, you are briefly on their domain, where their own cookies and policies apply. We receive no cookie from them; we receive only the profile fields described in our Privacy Policy.

The full list of third parties that process data for us is on our Subprocessors page.

6. Your choices

You can change your language, currency, and theme at any time in the interface — that just rewrites the relevant key.
You can delete cookies and storage for this site from your browser settings, and block them entirely. If you block the strictly necessary cookies you will not be able to stay signed in.
Signing out clears your session cookies.

Because we set no tracking cookies, there is no advertising profile to opt out of, and “Do Not Track” and Global Privacy Control signals have nothing to suppress on our site.

7. Changes and contact

If we ever introduce analytics or advertising cookies we will update this page and add a consent banner before setting them. Questions? Email privacy@growvo.ai.

Related policies

This policy is published in English. Translations are provided for convenience; if they conflict, the English version prevails.