Invytly

Cookie Notice for the Invytly Platform (Customers)

Last updated: October 26, 2026

1. What cookies are

Cookies are small text files that websites may store on a user’s device during navigation.

In addition to cookies, a web application may use technically equivalent technologies (e.g. browser storage, session identifiers, and security tools) that are strictly necessary for its operation.

2. Cookies and technologies used by the Platform

a) Strictly necessary and functional technologies

The Invytly Platform (the planner dashboard, hereinafter the "Platform") uses the following technologies to sign you in, keep your session secure and remember the settings you choose. They are strictly necessary for the service you request and do not require your consent.

  • Firebase Authentication, provided by Google as our processor, stores your signed-in user record in the browser’s IndexedDB (firebaseLocalStorageDb) or, where IndexedDB is not available, in localStorage or sessionStorage, under the key firebase:authUser:<app key>:[DEFAULT]. The record holds your user ID, email address, name, email-verification status and sign-in method, together with your ID token, refresh token and their expiry, and is used to verify your identity, keep your session active and secure your operations. It remains until you sign out or clear your browser data; in sessionStorage, it ends when you close the tab.
  • sessionStorage, which the browser deletes when you close the tab, holds: legal-acceptance:<user>, which records that you have accepted the current Terms and Privacy Notice so the check is not repeated on every reload; assistant-widget:<project>, which remembers whether the assistant panel is open and which conversation it shows; and invytly:project-approvals-banner-dismissed, which remembers that you closed a notice banner.
  • localStorage, whose entries have no expiry and remain until you clear your browser data, holds: invytly:active-project-id, the project you last opened; invytly:assistant-examples-dismissed, which remembers that you hid the assistant’s example prompts; and i18nextLng, the language of the interface.
  • The Firebase SDK keeps in IndexedDB (firebase-heartbeat-database) technical records of the SDK versions in use and of the dates on which requests were sent, until you clear your browser data.
  • The first-party cookie sidebar_state stores whether the side menu was expanded or collapsed. It expires after 7 days.

Staying signed in is part of the service you request: the Platform is a work tool you return to throughout the life of your events, so your session lasts until you sign out. You can end it at any time by signing out, and it is not used for profiling.

b) Profiling or marketing cookies

The Platform does not use profiling, marketing, or behavioral tracking cookies.

c) Analytics cookies

The Platform does not use analytics cookies or tools that measure traffic or user behavior (such as Google Analytics).

3. Security technologies

The platform uses Firebase App Check with Google reCAPTCHA to prevent unauthorized access, abusive use of the service, and fraudulent activities. App Check stores a short-lived security token and its expiry in the browser’s IndexedDB (firebase-app-check-database); the token is renewed automatically and the entry remains until it is overwritten or you clear your browser data. To assess whether a request comes from a genuine browser, reCAPTCHA collects information about the device, the browser and the interaction with the page, uses the _GRECAPTCHA cookie, whose duration is set by Google, and may read Google cookies on google.com domains.

These tools are used exclusively for security purposes. Google provides App Check and reCAPTCHA as our processor, under the Google Cloud terms and the Cloud Data Processing Addendum.

4. Managing cookies and similar technologies

You can delete cookies and browser storage at any time through your browser settings. The technologies described in sections 2(a) and 3 are necessary for the operation of the platform: blocking or deleting them may sign you out or impair access to and use of the services.

5. Cookie banner

The Platform does not use profiling or marketing cookies, and no cookie consent banner is shown.

6. Reference to the Privacy Policy

For all information regarding the processing of personal data carried out in the Platform, please refer to the Privacy Policy, which must be read together with this notice.

7. Data Controller

Damiano Carradori
Via Antonio Milani, 19 – 37124 Verona (Italy)
Email: privacy@invytly.com

8. Changes to this Cookie Policy

The Data Controller reserves the right to amend this notice at any time. Any changes will be published on this page together with the updated revision date.