01What is a cookie?
A small text file your browser saves. localStorage, sessionStorage, pixels, and SDKs do similar things; this page calls all of them "cookies" so you don't have to read five definitions.
02Categories we use
Where a cookie runs matters. The marketing site (goclaver.com) sets only essential cookies — no analytics, no ad trackers. The app (app.goclaver.com), which you reach only after signing in, adds session-authentication cookies and opt-out product analytics. The tables below note which is which.
Strictly necessary (can't be disabled)
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
sb-access-token | Supabase / Claver | Authenticates your session | 1 hour (refreshed) |
sb-refresh-token | Supabase / Claver | Refreshes your session | 30 days |
__cf_bm | Cloudflare | Bot mitigation | 30 minutes |
cf_clearance | Cloudflare | Confirms you're not a bot | 30 days |
fsm_* (localStorage) | Claver | UI preferences (theme, last-seen changelog) | Until you clear it |
Functional
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
fsm_theme | Claver | Remembers light/dark mode | Persistent (until cleared) |
fsm_recent_* | Claver | Recently viewed customers / jobs | 30 days |
Analytics (app only — opt-out available)
The marketing site (goclaver.com) runs no analytics. Inside the signed-in app (app.goclaver.com) we use PostHog for privacy-friendly product analytics — which features get used and where things break, never to sell or share your data. To opt out, email [email protected]; we also honor the Global Privacy Control signal.
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
ph_* | PostHog (app only) | Product-event analytics | 1 year |
Marketing & conversion
Advertising cookies are off by default, and we don't run any today. If we ever turn on our own ads, they load only after you choose Accept on the cookie banner — clicking Reject, ignoring the banner, or sending a Global Privacy Control signal keeps them off. These are the cookies involved if that happens:
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
_fbp | Meta | Measures Claver’s own ad conversions (loads only after you Accept) | 90 days |
_gcl_au / Google Ads | Measures Claver’s own ad conversions (loads only after you Accept) | 90 days |
Separately: if you, as a Claver customer, turn on Meta or Google conversion tracking for your own marketing, those pixels run on your booking pages under your own ad accounts and your control — not ours.
03How to control them
- Cookie banner. On your first visit you'll see a short notice. When advertising is active it's an Accept / Reject choice — advertising cookies load only if you Accept; otherwise it's a simple acknowledgement. Reopen your choice any time via Manage cookies.
- Do Not Sell or Share My Personal Information. We don't sell or share your data today. If we ever turn on advertising, those cookies (which California treats as “sharing”) load only if you Accept — opt out by sending a Global Privacy Control signal (which we honor automatically), or by clicking Reject / Manage cookies on the banner.
- Your browser. Every major browser can block or delete cookies. See allaboutcookies.org for how.
- Global Privacy Control. We treat the GPC signal as an opt-out of CCPA "sale" or "sharing".
- Do Not Track. We don't read DNT separately; the standard never converged. GPC is the live signal.
04Changes
If we add or remove a cookie, we update this page. If we ever introduce analytics or ad cookies on the marketing site, we'll ask for your consent first.
05Contact
Questions: [email protected]