Cookies
Cookies and local storage
Last updated: 11 November 2026
Operator and contact details
- Service operator
- Wang Jin
Shanghai, China
Velivow uses a very small number of cookies. They exist to keep you signed in and to protect the service. We do not use advertising cookies, analytics cookies, tracking pixels, cross-site identifiers, or third-party marketing scripts. Because of that, there is no cookie banner: nothing non-essential is being set that would need your permission first.
Cookies we set
| Name | Set by | Purpose | Lifetime | Can you turn it off? |
|---|---|---|---|---|
| velivow_session | Velivow | Keeps you signed in between pages. It holds a random session token; the server stores only a hash of it, never the token itself. Marked HttpOnly, SameSite=Lax, and Secure on production hosts. | 30 days, or until you sign out | Not while signed in — removing it signs you out. You can delete it from your browser settings at any time. |
| CF_Authorization | Cloudflare Access | Only present while the service is running as a private preview. It proves that the person reached the site through our access gateway. This cookie is not used on the public service. | Set by the gateway; currently 24 hours | Not while the preview gateway is enabled — removing it sends you back to the gateway sign-in. |
What we do not use
- No analytics or product-tracking cookies.
- No advertising, retargeting or affiliate cookies.
- No social media pixels or embedded third-party widgets that set cookies.
- No fingerprinting, canvas probing or device-identifier storage for tracking.
If that ever changes, we will list the new cookie here, say what it does, and ask for your permission before it is set. Nothing non-essential will load silently.
Other things your browser stores
Your browser may keep cached images and stylesheet files so pages load faster; those are ordinary HTTP caching, not identifiers. We use sessionStorage for one purpose: keeping an unsent message draft in the current conversation for the current browser tab. That draft is never used for tracking, is not sent to the server until you press send, and disappears when you send it, clear it, or close the tab. We do not uselocalStorage for tracking or advertising.
Controlling cookies
Every major browser lets you view and delete cookies, and block them for specific sites. Blocking the session cookie will prevent you from staying signed in; blocking the gateway cookie will prevent access to the private preview. Signing out from the account menu removes the session cookie from the browser.
Related pages
What data we collect and why is described in the Privacy Policy. Your privacy controls, including export and deletion, are on the Privacy hub. Terms of use are in the Terms of Service.