Skip to content
QRVane

Legal

Cookies

The sign-in cookies we set, when we set them, and why there is no cookie banner.

Last updated

1. The cookies we set, all of them for signing in

QRVane sets cookies only while you sign in or are signed in. There are 2, and over a secure connection each name starts with __Host-, which a browser accepts only from qrvane.com itself, with no Domain, so none is ever sent to go.qrvane.com:

  • qrvane.session_token (__Host-qrvane.session_token). When you sign in, by a link or by the code we email you. A random token that tells us which session is yours, so you stay signed in from page to page. It lasts: Up to 30 days, renewed while you use the app, and deleted when you sign out.
  • qrvane.better-auth-passkey (__Host-qrvane.better-auth-passkey). When you sign in with a passkey, or add one in your settings. A random value that ties your device’s passkey answer to the request we sent it, so the answer cannot be replayed. It lasts: 5 minutes.

These are the only cookies QRVane sets. We set no advertising or tracking cookies. When you open Paddle’s checkout to subscribe, after signing in, Paddle may set its own cookies, under Paddle’s own notice; apart from that, nobody else sets cookies through our pages.

2. Where there are none

  • Our public pages set no cookies.
  • Scanning a code sets no cookie, and the scan record holds no IP address. The pages a code opens, such as a menu or a business card, set none either.
  • If we ever count visits to this website with Cloudflare Web Analytics, it sets no cookie either. The privacy notice has the details.

The rules on cookies ask for consent before most cookies are stored, but make an exception where the cookie is strictly necessary to provide an ‘information society service’ that you asked for. We think each of the sign-in cookies is one: they are set only when you sign in, and without them you could not sign in or stay signed in. With no other cookies to ask about, there is nothing for a banner to ask.

Source: Information Commissioner’s Office, Cookies and similar technologies; read .

4. Controlling them

Signing out deletes the session cookie, and the passkey challenge deletes itself after 5 minutes. You can also block or clear cookies in your browser; QRVane’s public pages work the same without them, but you will not be able to sign in.