01What is a cookie?
A small text file your browser saves. localStorage, sessionStorage, pixels, and SDKs do similar things; this page calls all of them "cookies" so you don't have to read five definitions.
02Categories we use
Where a cookie runs matters. The marketing site (goclaver.com) sets essential cookies, plus analytics cookies only if you click Accept on the cookie banner. It runs no ad trackers. The app (app.goclaver.com), which you reach only after signing in, adds session-authentication cookies and opt-out product analytics. The tables below note which is which.
Strictly necessary (can't be disabled)
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
sb-access-token | Supabase / Claver | Authenticates your session | 1 hour (refreshed) |
sb-refresh-token | Supabase / Claver | Refreshes your session | 30 days |
__cf_bm | Cloudflare | Bot mitigation | 30 minutes |
cf_clearance | Cloudflare | Confirms you're not a bot | 30 days |
fsm_* (localStorage) | Claver | UI preferences (theme, last-seen changelog) | Until you clear it |
Functional
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
fsm_theme | Claver | Remembers light/dark mode | Persistent (until cleared) |
fsm_recent_* | Claver | Recently viewed customers / jobs | 30 days |
Analytics (marketing site: only with your consent; app: opt-out available)
On the marketing site (goclaver.com) we use PostHog analytics only after you click Accept on the cookie banner, to see which pages help shops sign up. If you click Reject, or your browser sends the Global Privacy Control signal, no analytics load. You can change your choice any time with the Manage cookies link below. Inside the signed-in app (app.goclaver.com) we use PostHog for privacy-friendly product analytics, which features get used and where things break, never to sell or share your data. To opt out, email [email protected]; we also honor the Global Privacy Control signal.
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
ph_* | PostHog | Marketing site: page and signup-step analytics, only after Accept. App: product-event analytics | 1 year |
Marketing and conversion
Advertising cookies are off by default, and we don't run any today. If we ever turn on our own ads, they load only after you choose Accept on the cookie banner, clicking Reject, ignoring the banner, or sending a Global Privacy Control signal keeps them off. These are the cookies involved if that happens:
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
_fbp | Meta | Measures Claver’s own ad conversions (loads only after you Accept) | 90 days |
_gcl_au / Google Ads | Measures Claver’s own ad conversions (loads only after you Accept) | 90 days |
Separately: if you, as a Claver customer, turn on Meta or Google conversion tracking for your own marketing, those pixels run on your booking pages under your own ad accounts and your control, not ours.
03How to control them
- Cookie banner. On your first visit you'll see an Accept / Reject choice. Analytics (and advertising, if we ever turn it on) load only if you Accept. Reopen your choice any time via Manage cookies.
- Do Not Sell or Share My Personal Information. We don't sell or share your data today. If we ever turn on advertising, those cookies (which California treats as “sharing”) load only if you Accept, opt out by sending a Global Privacy Control signal (which we honor automatically), or by clicking Reject / Manage cookies on the banner.
- Your browser. Every major browser can block or delete cookies. See allaboutcookies.org for how.
- Global Privacy Control. We treat the GPC signal as an opt-out of CCPA "sale" or "sharing".
- Do Not Track. We don't read DNT separately; the standard never converged. GPC is the live signal.
04Changes
If we add or remove a cookie, we update this page. Analytics on the marketing site load only after you consent, and if we ever add ad cookies they will too.
05Contact
Questions: [email protected]