Cookie Policy

Effective date: May 17, 2026

This page explains what cookies and similar storage we use on lovex.dev and inside our products. We keep it complete and short.

What is stored on your device

A cookie is a small piece of data stored by your browser. We also use localStorage, which works similarly. Nothing in the “Analytics” section below fires until you click Accept on the cookie banner. Strictly necessary cookies (authentication, the consent decision itself, the Saga chat session) are set without consent because the service does not work without them, per Article 6(1)(f) of the GDPR and Article 5(3) of the ePrivacy Directive.

Strictly necessary (always on)

• Consent cookie (lovex_consent) — records your choice so we don't show the banner on every visit. Versioned (v1:accepted / v1:rejected); we re-open the banner if the privacy policy materially changes. Expires after 180 days. Set on .lovex.dev so one choice covers the marketing site, Lova, and Studio.
• Session cookies — set by our authentication provider to keep you logged in while you use the product. Required for authentication to work. Rotate on a rolling 30-day window.
• Saga chat session (lovex_visitor) — set when you start a conversation with our Saga sales agent. Anonymous, crypto-random identifier; lets your chat resume across page reloads instead of starting over each time. HttpOnly + Secure + SameSite=Lax. Expires after one year or when you click the chat’s “new conversation” button (which also clears it server-side).

Analytics (only after you accept)

• Product analytics(EU-hosted) — we measure how people use the product: page views, funnel completion, retention, and feature adoption. The analytics provider sets a pseudonymous distinct ID in a cookie and localStorage so we can tell returning visitors from new ones. If you don't accept, none of this fires. See /subprocessors for the vendor category processing this data on our behalf.

Functional UI state (browser-only localStorage)

Some preferences are stored in your browser's localStorage so the product remembers your choices between sessions. These never leave your device and are not sent to our servers or any sub-processor.

• Panel widths and view preferences in Lova — e.g. how wide you dragged the task detail panel.
• One-time UI hints— e.g. whether you've seen the voice-mode discoverability pulse on the Saga chat. We don't show it twice.

What we don't use

• No advertising cookies
• No retargeting or cross-site tracking pixels
• No third-party session replay
• No data brokers or enrichment services
• No fingerprinting (canvas, font enumeration, audio context, or device-fingerprint libraries)

Changing your mind

Use the Cookie settings link in the footer to re-open the banner at any time and pick a different option. You can also clear cookies through your browser settings — deleting lovex_consenthas the same effect. Rejecting analytics doesn't break anything user-facing; we just lose the ability to measure how you use the product. Strictly necessary cookies cannot be turned off through the banner because the product would not work without them; you can clear them via your browser at any time.

Legal basis

We rely on your explicit, opt-in consent under the EU ePrivacy Directive for any non-essential cookies. Strictly necessary cookies (authentication, consent) do not require consent under the law. Lovex AB is a Swedish aktiebolag and our supervisory authority is Integritetsskyddsmyndigheten (IMY).

Questions? Email hello@lovex.dev or read our Privacy Policy for the full data handling story.