Cookie Policy

This Cookie Policy explains how Oriva uses cookies and similar technologies (such as local storage) on oriva.dev, and the equivalent on-device storage used by the Oriva iOS and Android apps. It should be read alongside our Privacy Policy.

In the native iOS and Android apps, Oriva does not set browser cookies. The same categories of state described below (auth session, guest world, preferences, consent) are held instead in the app's own sandboxed storage on your device, are only accessed by Oriva, and are removed when you delete the app, sign out, or delete your account.

1. What are cookies?

Cookies are small text files that websites place on your device to remember information about you. "Similar technologies" include local storage and session storage, which serve comparable purposes. In this policy, "cookies" refers to all of these.

2. Categories of storage we use

Essential

Required for Oriva to function. These keep you signed in, hold guest world data until you create an account, and remember one-off interface state such as the splash screen and soft-wall dialog. The Service cannot operate without them and they do not require your consent.

Functional

Remember small comforts, such as whether you’ve seen the “add to home screen” prompt or the one-time share intro. Optional.

Analytics

Reserved for a future privacy-respecting analytics rollout. Oriva does not currently set any analytics identifiers. If this changes, we will list the specific technologies here and only enable them after your consent.

Marketing

Optional first-touch attribution for referral links: if a friend shares Oriva with you using a personal link, we remember that on your device for 90 days so we can credit them if you later create an account. We do not use advertising or cross-site tracking cookies.

3. Specific technologies currently in use

• Authentication session (localStorage, key sb-*-auth-token) — keeps you signed in and refreshes your session. Essential.
• Guest world data (localStorage, oriva.guestWorld.v2) — stores the countries and memories you add before creating an account, so nothing is lost when you sign up. Essential.
• Splash shown flag (sessionStorage, oriva.splash.shown) — suppresses the intro splash for the rest of the tab session. Essential.
• Soft-wall dialog state (sessionStorage, oriva-softwall-title) — remembers which sign-up prompt to show. Essential.
• Sidebar layout (cookie, sidebar_state, 7 days) — remembers whether the navigation sidebar is expanded. Essential.
• Install-prompt engagement (localStorage, oriva.install.*) — tracks in-app activity so we only invite you to install Oriva once you’re getting value from it, and respects a dismissal for 30 days. Functional.
• Share intro seen (localStorage, oriva.shareIntroSeen) — hides the one-time share explainer after you’ve seen it. Functional.
• Referral attribution (localStorage, oriva_growth_ref, oriva_growth_share, oriva_growth_ts, 90 days) — first-touch attribution for personal share links. Marketing.
• Consent choice (localStorage, oriva.consent.v1) — remembers your cookie preferences on this device. Essential.

4. Third-party technologies

• Lovable Cloud (Supabase) — the Supabase client library sets the authentication token described above in localStorage. No third-party cookies are set on your device by Supabase.
• OpenFreeMap vector tiles — the World map view requests vector base-map tiles from tiles.openfreemap.org as you pan and zoom. Tile requests include your IP address and the tile coordinates being requested. The tile server does not set cookies and does not identify you as an Oriva user.
• Google Fonts & Google Identity — we load the Inter and Instrument Serif web fonts from fonts.googleapis.com / fonts.gstatic.com. If you choose to sign in with Google, Google’s Identity Services script is loaded on demand to complete the OAuth flow. Neither font requests nor the on-demand Google Identity script set Oriva-scoped cookies; Google may set its own cookies under its own privacy notice.
• Outbound social links — clicking our Instagram or TikTok footer links takes you to those platforms, which set their own cookies under their own policies.

Oriva does not use third-party product analytics, advertising networks, cross-site trackers, session-replay, or fingerprinting. If we introduce any of these, we will list them here and load them only after you have granted the appropriate consent.

The embedded live preview on our landing page loads Oriva inside a phone-shaped iframe. Inside that frame the cookie banner is intentionally suppressed — the banner belongs to the outer marketing site, not the demo — and no consent is inferred from anything you do inside the preview.

5. Your choices

You can accept all, reject non-essential, or manage each category individually from the cookie banner shown on first visit, or at any time from your browser via the “Manage cookie preferences” option. You can also clear all Oriva storage through your browser settings; note that blocking essential items will sign you out and prevent Oriva from working.

6. Changes

We may update this Cookie Policy as the product evolves. When we add a new technology, we will list it above and, where required, request your consent before it loads. We will update the “Effective” date at the top of this page.

7. Manage your preferences

Open cookie preferences to review or change your choices at any time.

8. Contact

Questions can be sent to hello@deskjockeydigital.co.uk.