Legal

Cookie Policy

Last updated 22 June 2026

This policy explains how iqava ("we", "us") uses cookies and similar technologies (such as browser local storage) on our website and platform, and how you can control them. It complements our Privacy Policy.

What cookies are

Cookies are small text files stored on your device. We also use local storage, which works similarly. Some are essential to run the service; others are optional and only set with your consent.

The categories we use

  • Strictly necessary— required to sign you in, keep the service secure and remember the choices you make. These don't require consent and can't be switched off.
  • Functional— remember preferences like your console layout. They improve the experience but aren't essential.
  • Analytics — help us understand how the product is used so we can improve it. Off by default; set only with your consent.
  • Marketing — measure and tailor our marketing. Off by default; set only with your consent.

We do not currently set any analytics or marketing cookies. If that changes, they will only be set after you opt in, and this policy will be updated.

Cookies & storage we set today

NameCategoryPurposeDuration
authjs.session-token (and __Secure- variant)Strictly necessaryKeeps you signed in to your workspace.Session / up to 30 days
authjs.csrf-token / authjs.callback-urlStrictly necessaryProtects sign-in against cross-site request forgery and routing.Session
iqava_consentStrictly necessaryRemembers your cookie choices on this banner.180 days
theme (local storage)Strictly necessaryRemembers your light/dark preference.Persistent (until cleared)
iqava-sidebar-collapsed, iqava-nav-groups (local storage)FunctionalRemembers your console layout (collapsed sidebar, open nav groups).Persistent (until cleared)

Managing your choices

When you first visit, our banner lets you accept all, reject non-essential, or open Preferences to choose per category. You can change your mind any time via the “Cookie preferences” link in the footer. You can also block or delete cookies in your browser settings, though strictly-necessary cookies are needed for sign-in to work.

Self-hosted deployments

If your organization runs iqava in its own environment, only the strictly-necessary cookies described above are used, served from your own domain.

Contact

Questions about this policy? Contact us.