Cookies and browser storage
Last updated: 18 September 2026
What this policy covers
This policy covers the ContentVelo website and the ContentVelo client portal. It lists every cookie those applications set and — because a cookie notice is not the whole story — also the things they store in your browser that are not cookies at all.
ChatMai is a separate application and is not covered here.
The cookies we set
Five cookies, and no others. Four are necessary for the applications to work; the fifth belongs to analytics and has its own section below.
| Name | What it is for | How long it lasts |
|---|---|---|
.AspNetCore.Culture |
Remembers the language you chose, so the site is served in it on your next visit. | One year |
.AspNetCore.Antiforgery.* |
Carries the token that proves a form submission came from this site and not from another one. Set only on pages that contain a form. | Until you close your browser |
.AspNetCore.Cookies |
Keeps you signed in to the client portal. Set only after you sign in, and cleared when you sign out. | Seven days, extended each time you use the portal |
AdminAuth |
Keeps our own staff signed in to the administration application. It is never set on a customer's browser. | Eight hours |
cv_vid, cv_ses, cv_src |
Counts how many people visit the website and the client portal, and which link or campaign brought them here. Set by our own servers rather than by an advertising network: they hold a random identifier and nothing about you, and no IP address is recorded. | cv_vid 400 days; cv_ses until you close your browser; cv_src 90 days |
_ga, _ga_X9KLEYWLE8 |
Set by Google Analytics on the website, to tell one visitor's session from another's. See the analytics section below. | Set by Google, not by us; typically up to two years |
Stored in your browser, but not cookies
These values are kept by your browser under this site's name and are never sent to our servers. Clearing this site's data removes them.
cv-theme— Which colour theme you chose: light, dark, or follow the system. Used by both the website and the portal.cv-install-dismissed— When you last dismissed the invitation to install ContentVelo as an app, so that it is not offered again immediately.pdpa-consent— Whether you have answered the cookie notice, and which button you pressed. It is read on every page load to decide whether the analytics tag is loaded; the button in section 6 clears it and brings the notice back.insights_snapshot_…— In the client portal only: the last set of insight figures shown for your workspace, so the page has something to draw while fresh figures are fetched.
Analytics
The ContentVelo website loads Google Analytics 4. It records which pages are visited, roughly where in the world the visitor is, and which site or search sent them, so that we can tell which pages are worth keeping. Google, not ContentVelo, sets the cookies for this and decides their names and lifetimes.
The client portal and the administration application do not load analytics of any kind.
Consent, and what actually happens today
Until you answer the cookie notice, this site fetches nothing that is not needed to run it: Google Analytics is not loaded, and no _ga cookie is set. The notice appears on your first visit and stays on the page until you answer it. Accept All is what loads analytics; Essential Only leaves it off, and so does leaving the notice unanswered.
Your answer is kept in this browser under pdpa-consent, so you are not asked again on your next visit; it is never sent to our servers. You can change it whenever you like with the button in section 6, which brings the notice back. And if you browse with JavaScript turned off you will see no notice at all — and get no analytics either, because the script that would show the notice is the same script that would load the analytics tag.
How to control all of this
You can remove or block everything listed above yourself:
- Clearing this site's data in your browser removes every cookie and every stored value listed here. You will be signed out, and your language and theme choices return to their defaults.
- Most browsers can block cookies for a single site, usually from the padlock or information icon in the address bar.
- Google publishes a browser add-on that opts you out of Google Analytics on every site. A content blocker will also stop the script loading.
Blocking the four necessary cookies will stop the client portal from working: without them you cannot stay signed in, and forms are rejected.
Changes, and who to ask
If we add or remove a cookie, we will change this page and the date at the top of it. Anything on this page can be queried at our privacy address.