Cookie policy.

Cookies are small text files a website asks your browser to store. They let the site remember things across page loads and sessions — that you're logged in, that you closed a banner, that you came from a specific marketing link.

This policy covers cookies and similar technologies (local storage, session storage, pixel tags) used on krewvio.com and inside the Krewvio dashboard.

Three categories, no more:

• 01Strictly necessary — keep you logged in, remember your active workspace, prevent CSRF attacks. These cannot be turned off without breaking the platform.
• 02Preferences — remember your dashboard layout, dark/light mode if you set one, dismissed banners. Optional but useful.
• 03Analytics — first-party only. Tells us which pages convert and which marketing channels drive sign-ups. Anonymized, aggregated, never tied to a specific homeowner.

We do not use third-party advertising cookies. We do not allow ad networks to drop tracking pixels on krewvio.com. We do not sell the analytics data we collect.

Strictly necessary

• 01krv_session — your login session. Expires when you sign out or after 14 days.
• 02krv_workspace — the active workspace. Expires after 30 days.
• 03krv_csrf — CSRF token, rotated per session.

Preferences

• 01krv_theme — your color theme preference. Expires after 1 year.
• 02krv_layout — your dashboard layout. Expires after 1 year.
• 03krv_dismissed — banners you've dismissed. Expires after 90 days.

Analytics (first-party)

• 01krv_visitor — anonymous visitor identifier. Expires after 1 year.
• 02krv_utm — first-touch marketing attribution. Expires after 90 days.

You can opt out of preferences and analytics cookies any time from the banner at the bottom of the page, or from the Privacy controls inside your dashboard. Strictly-necessary cookies cannot be disabled without breaking the platform.

You can also block or delete cookies through your browser settings. Doing so for strictly-necessary cookies will log you out and may make parts of the platform unusable.

We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we automatically disable analytics cookies for your session and treat the signal as a CCPA opt-out request.

If we add a cookie or change how an existing one is used, we update this page and reset the consent banner so you can review the new set. Material changes are also announced in the dashboard for 30 days.