Legal

Cookie Policy

Last updated April 22, 2026

The cookies Delivvo uses for sessions, portal access, and preferences.

This Cookie Policy explains how Delivvo uses cookies and similar technologies on delivvo.io, inside the Delivvo dashboard, and in Delivvo-hosted client portals.

What cookies are

Cookies are small text files placed on your browser or device when you visit a website. Some cookies are essential because they keep the site secure and functional. Others remember preferences.

Delivvo currently uses a minimal set of cookies focused on authentication, portal access, and user preference. Delivvo does not currently use analytics cookies or advertising cookies on its core product surfaces.

Cookies Delivvo uses

The table below reflects the cookies Delivvo currently uses or expects to use as the current roadmap is completed.

CookiePurposeTypeTypical duration
sb-access-tokenKeeps an authenticated freelancer or admin session active.EssentialShort-lived session token, typically around 1 hour and refreshed as needed
sb-refresh-tokenRefreshes the authenticated session without forcing a new login on every visit.EssentialUp to 30 days
portal_sessionKeeps an invited client signed in to a private project portal after one-time code verification.EssentialUp to 7 days
themeRemembers light or dark mode preference.Preference / optionalUntil cleared, overwritten, or expired by the browser or app setting
delivvo_impersonateAdmin-only cookie used only when a read-only impersonation feature is enabled and actively in use.Essential when setTemporary, for the active impersonation session or configured admin duration

Delivvo may also set development-only cookies in local or demo environments for testing features. Those cookies are not intended for normal production use.

Why we use these cookies

We use cookies for three narrow reasons:

  • to authenticate users and keep them signed in
  • to maintain secure access to private client portals
  • to remember interface preferences such as theme selection

We do not currently use cookies to profile users for advertising or build marketing audiences.

Consent and EU users

Under the EU ePrivacy rules, cookies that are strictly necessary to provide a service requested by the user generally do not require prior consent. For Delivvo, that means the authentication and portal-access cookies listed above are treated as essential.

The theme cookie is a preference cookie. Delivvo treats it as optional because it only remembers your chosen display mode.

Because Delivvo does not currently use analytics or advertising cookies, there is no analytics-cookie consent flow in the core product at this time.

Third-party cookies

Delivvo may rely on third-party infrastructure providers to deliver the service, but Delivvo itself does not intentionally place advertising cookies through those providers. If Delivvo later introduces checkout, analytics, or other embedded experiences that set additional cookies, we will update this policy.

How to control or clear cookies

Most browsers let you review, block, or delete cookies through browser settings.

Please note:

  • deleting sb-access-token or sb-refresh-token will sign you out of Delivvo
  • deleting portal_session will sign you out of any client portal you are using
  • deleting theme will reset your saved appearance preference

Blocking essential cookies may prevent Delivvo from working correctly.

Changes to this policy

We may update this Cookie Policy from time to time to reflect product, legal, or infrastructure changes.

Contact

Questions about this Cookie Policy can be sent to support@delivvo.io.