Last updated: 2026-03-27
A cookie is a small piece of text that a website stores in your browser so that it can remember something about you between visits. Similar technologies include browser local storage, session storage, and IndexedDB. Throughout this policy we use the word cookies as shorthand for all of these. Cookies are not programs, cannot read files from your device, and cannot run code on your computer. They simply store short strings of text that the website reads back later.
Truvizy uses cookies for four purposes: keeping you signed in between visits, remembering your preferences (language, scan mode, UI theme), measuring how the product is used so we can improve it, and serving non-intrusive advertising to free-tier users so the free scanning tier can stay free. We do not use cookies to build advertising profiles about you, sell your data to third parties, or track you across unrelated websites.
These cookies are required for Truvizy to function and cannot be disabled. They include your authentication session token, CSRF protection tokens, and the consent preferences you set in our cookie banner. Without them, you could not log in, we could not protect your account from cross-site attacks, and we could not remember that you have already accepted or declined optional cookies. These cookies are set by Truvizy itself and expire when you log out or after a short inactivity period.
We use browser local storage to remember your language selection, your preferred scan mode (Quick vs Deep), your streak data, your weekly mission progress, and small UI state such as whether a tooltip has already been dismissed. These keys are stored only on your device and are never sent to our servers unless you are signed in and they are part of a feature you explicitly use (for example, saving your streak to your account). You can clear them at any time through your browser settings.
Truvizy uses PostHog for product analytics. PostHog sets cookies to generate an anonymous device identifier, measure page views and feature usage, and capture error events. We use this data to understand which features are valuable, find bugs, and prioritize fixes. PostHog is configured to respect Do Not Track and to honor the consent choice you make in our cookie banner. You can opt out at any time from your profile settings. Analytics cookies are optional and never required to use Truvizy.
Free-tier users see ads served by Google AdSense. Google may set cookies in your browser to limit how often you see the same ad, measure ad performance, and if you have given consent show ads that are more relevant to your interests. For users in the European Economic Area, United Kingdom, and Switzerland, Truvizy uses a Google-certified consent management platform to collect consent for personalized ads in compliance with the GDPR and the ePrivacy Directive. If you decline personalized ads, you will still see ads, but they will be non-personalized. Paid subscribers (Scan Pro, Family Plan, Forensic) never see ads and no advertising cookies are set on their sessions.
The following third-party services may set cookies when you use Truvizy. Google AdSense and Google DoubleClick (advertising, free tier only). PostHog (analytics, optional). Stripe (payments, only on the checkout page). Supabase (authentication, strictly necessary). Cloudflare (security and performance, strictly necessary). Each of these providers publishes its own cookie and privacy policy. We have selected them because they are widely used, audited, and compliant with major data protection laws.
You can control cookies in several ways. First, you can use the cookie banner that appears on your first visit to accept or decline optional cookies. Second, you can change your decision at any time from the Settings page in your Truvizy profile. Third, every modern browser lets you delete existing cookies, block new ones from specific sites, or block third-party cookies entirely. Check your browser documentation for instructions. Fourth, you can install a reputable ad-blocker. Truvizy does not detect or penalize users who block ads. Fifth, you can upgrade to any paid plan to remove all advertising cookies automatically.
We may update this Cookie Policy when we add a new feature, switch a provider, or change how cookies are used. When we make a material change, we will update the last updated date at the top of this page and, if the change affects your rights, notify you by email or in-app banner. Continued use of Truvizy after an update constitutes acceptance of the revised policy. Questions about this policy can be sent to privacy@truvizy.app.