Published on April 21, 2026. Effective from April 21, 2026.
Cookies Policy
At Revi we use first-party and third-party technologies for three separate purposes: keeping the site secure and operational, measuring basic service usage in an aggregated way without storing cookies on your device, and, only when you give us permission, enabling advanced analytics and marketing.
This policy explains what is always active, what stays blocked until consent is granted, and how you can change your choice at any time from the Cookie settings link in the footer.
1. What is always active
- Essential and security technologies. They are required to manage the session, protect forms, remember your privacy choice, and prevent fraud or abuse.
- First-party aggregated measurement without cookies. We record pageviews and basic cookie banner events on the server side for security, service reliability and product improvement. This layer does not use cookies,
localStorage, fingerprinting or persistent identifiers on your device. - No advanced analytics or marketing before opt-in in the EEA/UK or when the region is unknown. In those cases Google Analytics 4, Google Tag Manager, Meta Pixel and affiliate attribution remain blocked until you accept the relevant category.
2. Your choices
- Essential. Always active. This includes session handling, security, consent storage, reCAPTCHA and the cookie-free aggregated measurement described above.
- Analytics. Enabled only if you accept it. It allows us to load Google Analytics 4 for more detailed navigation and performance measurement.
- Marketing. Enabled only if you accept it. It allows marketing tags through Google Tag Manager, Meta Pixel and the affiliate cookie for commercial attribution.
3. Cookie and technology inventory
| Cookie or technology | Category | Description and purpose | Provider or domain | Retention |
|---|---|---|---|---|
| revi_jwt_session | Essential | Identifies the user session and protects essential site functionality. | revi.io | Up to 24 hours of inactivity (depends on session settings) |
| XSRF-TOKEN | Essential | Improves form and request security by preventing CSRF attacks. | revi.io | Depends on session configuration |
| revi_cookie_consent_v2 | Essential | Stores your cookie consent preferences to apply your choice. | revi.io | 6 months (rejection) or 24 months (acceptance) |
| server_pageview_measurement | Essential | Records pageviews and basic CMP events server-side for security, service reliability and product improvement without using cookies or persistent identifiers. | revi.io | Nothing is stored on your device |
| reCAPTCHA | Essential | Protects forms and access points from bots or abuse through Google reCAPTCHA. | google.com | Depends on Google security settings |
| _ga | Analytics | Distinguishes users for aggregated statistical analysis in Google Analytics. | revi.io | 2 years |
| _ga_* | Analytics | Maintains session state and event measurement in GA4. | revi.io | 2 years |
| _gid | Analytics | Distinguishes users for 24 hours for usage analytics. | revi.io | 24 hours |
| af_revi_jwt_session | Marketing | Links the visit to an affiliate identifier for commercial attribution. | revi.io | 7 days |
| _fbp | Marketing | Identifies browsers for Meta campaign measurement and optimization. | revi.io | 3 months |
| _fbc | Marketing | Associates visits with Meta ad clicks when applicable. | revi.io | 3 months |
| _gcl_au | Marketing | Helps measure Google advertising conversions. | revi.io | 3 months |
4. External content loaded on click
YouTube videos and Google Maps are not loaded automatically. We first show a placeholder and only contact those providers after you click to open that content.
| External content | Provider | Description and purpose | When it loads | Provider or domain |
|---|---|---|---|---|
| YouTube | Plays embedded YouTube videos only after user interaction. | Only after you click to load it | youtube.com | |
| Google Maps | Displays embedded Google Maps only after user interaction. | Only after you click to load it | google.com |
5. Retention periods
- Your cookie preference is stored for 180 days when you reject optional categories and for 730 days when you accept any optional category.
- Raw events from our first-party telemetry are kept for 90 days.
- Daily aggregates from that telemetry are kept for 395 days.
- The specific retention of each optional cookie is listed in the inventory table above.
6. Providers and international transfers
When you accept analytics or marketing, or when you decide to load external content, some providers may process data outside the European Economic Area. In our setup, the main recipients are Google and Meta. When that happens, we apply the contractual and organisational safeguards required under applicable law.
The first-party aggregated measurement without cookies is run by Revi on infrastructure operated by or for Revi and is not designed to identify you directly.
7. How to withdraw or update consent
You can accept, reject or review your preferences at any time. Withdrawal takes effect from that moment and we remove optional cookies under our control when appropriate.
8. More information
If you need more detail about privacy or data protection, please review our privacy policy or contact us through the support channels published on the site.