InvlyInvly Cookie Policy
Effective date: 2026-05-28 Version: 1.0 Controller: Rev Tech MB, info@invly.lt.
Template. Update this document whenever new cookies or third-party trackers are introduced.
1. What cookies are
Cookies are small text files stored by your browser when you visit a site. They support session management, preferences, and other functions.
This policy also covers other client-side storage technologies — localStorage and sessionStorage.
2. Cookies and storage we use
Strictly necessary (no consent required)
| Name | Type | Purpose | Lifetime | Third party |
|---|---|---|---|---|
sb-orhvfyxjagmgcrhpebwf-auth-token | Strictly necessary | Supabase authentication session | Up to 7 days (auto-refreshing) | Supabase |
invly.theme | Strictly necessary | Light / dark mode preference (localStorage) | Until manually cleared | None (local) |
invly.pendingCheckout | Functional | Remembers a pending Stripe Checkout intent when you weren't yet logged in (sessionStorage) | End of session | None |
invly_consent | Strictly necessary | Stores your cookie choice (localStorage) | Until manually cleared | None (local) |
Analytics and marketing (only with your consent)
These load and run only after you click "Accept" in the consent banner. If you choose "Essential only", they are not loaded.
| Name | Type | Purpose | Lifetime | Third party |
|---|---|---|---|---|
Meta Pixel (_fbp, etc.) | Marketing | Ad performance measurement and audience building (Meta) | up to 90 days | Meta |
PostHog (ph_*, localStorage) | Analytics | Product usage analytics; EU servers; all text and inputs masked in session replays | up to 12 months | PostHog |
| Vercel Analytics / Speed Insights | Analytics | Anonymous traffic and performance stats | session | Vercel |
You can withdraw consent at any time by clearing this site's cookies and local storage (the banner will reappear).
3. Legal basis
3.1. Strictly necessary cookies operate without separate consent because the Service would not function without them (auth session). This aligns with the exception under Article 5(3) of Directive 2002/58/EC (ePrivacy).
3.2. Analytics and marketing cookies (Meta Pixel, PostHog, Vercel Analytics) are set only after prior explicit consent via the cookie banner — they are not loaded until you click "Accept". This satisfies Article 5(3) of the ePrivacy Directive and the GDPR consent requirement.
4. Stripe and other third parties
When you proceed to Stripe Checkout, Stripe may set its own cookies for payment security and fraud prevention. Those cookies operate on the stripe.com domain, not invly.lt. See Stripe Cookies Policy.
If you navigate to anthropic.com (e.g. via an outbound link), Anthropic may set its own cookies governed by the Anthropic Privacy Policy.
5. Managing cookies
Modern browsers let you:
- view installed cookies;
- delete individual or all cookies;
- block future cookies or restrict them by domain.
| Browser | Path |
|---|---|
| Chrome | Settings → Privacy and security → Cookies |
| Safari | Preferences → Privacy → Manage Website Data |
| Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Edge | Settings → Cookies and site permissions |
Note: disabling strictly necessary cookies will prevent you from logging into Invly.
6. Changes
| Version | Date | Notes |
|---|---|---|
| 1.0 | 2026-05-28 | Initial version |
Material changes will be posted at https://www.invly.lt/cookies and, where applicable, separately notified.
7. Contact
Questions: info@invly.lt.
The Lithuanian-language version of this policy is authoritative.