Cookie Policy
Last updated: May 31, 2026
This Cookie Policy explains how SACS Ecommerce Stores Inc. (operating as "Cohvia," "we," "us") uses cookies and similar technologies on cohvia.com and in the Cohvia application (together, the "Service"). It supplements our Privacy Policy.
By using the Service you accept the use of strictly necessary cookies. For non-essential cookies, we ask for your consent where required by law and you can manage your preferences at any time.
1. What is a cookie?
A cookie is a small text file that a website stores on your browser. It lets the site recognize your browser and remember information about your visit. Similar technologies include local storage, session storage, pixels, tags, SDKs, and device identifiers — for simplicity, this Policy uses "cookies" to refer to all of them.
Cookies can be:
- First-party — set by us (cohvia.com), or third-party — set by another domain when content from that domain loads in our pages.
- Session — deleted when you close the browser, or persistent — kept for a defined period.
2. How we categorize the cookies we use
We group cookies into four categories.
2.1 Strictly necessary (always on)
These cookies are required for the Service to work. Without them, you cannot sign in, navigate the app securely, or have your preferences remembered between pages. They do not need consent under most laws. They are used for:
- Authentication and session management (provided via our authentication subprocessor)
- Security (CSRF protection, fraud and abuse prevention)
- Load balancing and routing
- Remembering your cookie preferences
2.2 Functional (consent where required)
These help the Service remember choices you make — for example, language or display preferences — to give you a better experience. They are not strictly necessary but improve usability.
2.3 Analytics (consent where required)
These help us understand how visitors and users interact with the Service so we can improve it. Analytics data is aggregated and we do not use it to build advertising profiles about you.
2.4 Marketing (consent required)
These would be used to measure marketing campaign effectiveness or to show you Cohvia ads on other sites. We currently use marketing cookies sparingly; where we do, we ask for your consent first and you can withdraw it at any time.
3. Cookies we currently use
The table below lists the main cookies we use. We update it as our stack evolves; please check back periodically.
| Cookie / Technology | Category | Set by | Purpose | Typical duration |
|---|---|---|---|---|
__session, __client, related Clerk cookies | Strictly necessary | Clerk (our authentication subprocessor) | Sign-in, session management, security | Session to 1 year |
| Cookie-consent preference cookie | Strictly necessary | Cohvia | Remembers your cookie choices | Up to 1 year |
| Routing / load-balancing cookies | Strictly necessary | Vercel (hosting) | Routes requests; keeps the site reliable | Session |
| Analytics cookies | Analytics | [ANALYTICS PROVIDER, e.g., Vercel Analytics / PostHog / Plausible] | Aggregated usage analytics | Up to 1 year |
| Marketing cookies | Marketing | [IF USED — e.g., LinkedIn Insight Tag] | Measure campaign effectiveness | Up to 1 year |
Note: this list reflects the current configuration of the Service. Specific cookie names set by our subprocessors may change without prior notice; the categories and purposes are what matter.
4. Your choices and controls
4.1 Cookie preferences
Where required by law, we show a cookie banner the first time you visit. You can change your choices at any time via the "Cookie preferences" link in the website footer.
4.2 Browser controls
Most browsers let you block or delete cookies. Doing so for strictly necessary cookies will break sign-in and core functionality. For instructions, see your browser's help pages:
- Chrome — https://support.google.com/chrome/answer/95647
- Safari — https://support.apple.com/en-ca/guide/safari/sfri11471/mac
- Firefox — https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Edge — https://support.microsoft.com/en-us/microsoft-edge
4.3 Global Privacy Control (GPC) and "Do Not Track"
Where required by US state privacy laws (including California), we honor the Global Privacy Control browser signal as a valid opt-out of "sale" and "sharing" of personal information for advertising. We do not currently respond to legacy "Do Not Track" headers, which have no agreed standard.
4.4 EU and UK
In the EEA, we ask for opt-in consent for non-essential cookies before they are set. In the UK, under the Data (Use and Access) Act 2025 and updated PECR rules, low-risk analytics and functional cookies may operate on a clear notice + opt-out basis; non-essential and tracking cookies still require opt-in consent.
5. Third-party cookies and subprocessors
Some cookies are set by our subprocessors when their services load in our pages — for example, authentication (Clerk), hosting (Vercel), and analytics. These third parties are bound by contracts limiting their use of personal data to providing services to us. The current list of subprocessors is at Subprocessors list.
6. Changes to this Policy
We may update this Policy from time to time, for example when we change cookie providers or add a new category. We will post the updated version with a new "Last updated" date and, where required, ask you to re-confirm your consent.
Contact: SACS Ecommerce Stores Inc. (operating as Cohvia), 620 King Street North, Suite 1004, Waterloo, Ontario N2J 4G8, Canada — privacy@cohvia.com.