Spendvora sets three cookies and all of them are needed to make the app work. There is no analytics, no advertising and no tracking, which is why you are not being nagged by a banner.
| Cookie | What it does | How long it lasts |
|---|---|---|
spendvora_session |
Holds your sign-in token so the app knows who you are on each page. Deleted when you sign out. | 14 days |
spendvora_sess |
The PHP session cookie. Carries short-lived state such as one-off status messages between pages. | Until you close your browser |
spendvora_csrf |
Security token that proves a form was submitted from Spendvora and not from another site. | Until you close your browser |
All three are first-party cookies, set by Spendvora itself. The two sign-in cookies are HTTP-only, so JavaScript cannot read them, and all three are marked secure when the site is served over HTTPS.
UK law requires consent for cookies that are not strictly necessary. All of ours are strictly necessary: two keep you signed in, and one protects forms against cross-site request forgery. Remove any of them and the app stops working. That exemption is the only reason we can skip the banner, and if we ever add anything optional we will ask you properly first.
The marketing pages you are reading now set only the security token cookie until you sign in.
The app remembers your light or dark theme preference in your browser's local storage. That never leaves your device and is not a cookie.
You can clear or block cookies in your browser settings. If you block Spendvora's cookies you will not be able to sign in or submit forms, so the app will not be usable. Signing out deletes the sign-in cookie for you.
For the wider picture of what data we hold and why, read the privacy policy.
Brainwave Designs Ltd · Company No. 17063005 · VAT No. 515 6000 32
Registered in England & Wales · 22 Commerce Road, Lynchwood, Peterborough, PE2 6LR
Questions about this document: procurement@brainwavedesigns.co.uk
