Cookies and browser storage

Last updated 6 November 2026

milvao.com sets one cookie, for region only, and no analytics or advertising cookies. The app uses cookies only for sign-in and secure sessions.

1. 01On milvao.com

   Name	What it does	Lasts	Type
   mv_regionCookie	Stores only "in" or "intl", worked out from the country your visit comes from (never your IP address), so visitors in India see examples written in Hinglish.	30 days	Preference
   themeLocal storage	Your light, dark or system theme choice.	Until you clear it	Preference
   milvao-blog-cta-dismissedTab storage	Remembers that you closed the get-started card on a blog post.	Until you close the tab	Preference

   The mv_region cookie holds no personal data and is not tied to your IP address. Add ?region=in or ?region=intl to any page address to change it.

2. 02On app.milvao.com

   The app is for community owners, operators and Milvao staff, plus the private profile page members open from their link. It uses only the cookies it needs to work and keep accounts secure:

   Name	What it does	Lasts	Type
   __Secure-better-auth.session_tokenCookie	Keeps owners, operators and staff signed in. Not readable by page scripts.	14 days, renewed while you use the app	Needed
   __Secure-better-auth.two_factorCookie	Holds a sign-in while you enter your two-factor code.	10 minutes	Needed
   milvao_profileCookie	Lets a member edit their own profile after they open their profile link. Sent only to profile pages.	60 minutes	Needed
   mv_view_asCookie	Milvao staff only: a signed, read-only support view of a workspace whose owner granted access.	1 hour at most	Needed
   themeLocal storage	Your light, dark or system theme choice.	Until you clear it	Preference

   When you test the app on your own computer, the first two cookies have no “__Secure-” prefix. Signing out deletes the session cookie.

3. 03Bot checks by Cloudflare Turnstile

   The pilot request and contact forms on this website, and sign-in, invite acceptance and password reset in the app, use Cloudflare Turnstile to tell people from bots. It runs in a frame loaded from challenges.cloudflare.com and processes browser signals under Cloudflare's own privacy policy. It sets no cookies on milvao.com or app.milvao.com and is not used for advertising.

4. 04Counting visits without cookies

   To see which pages and campaigns bring communities to us, this website counts visits itself. When a page loads, or you click a main button or send one of our forms, your browser sends Milvao's app a short note: the page address without anything after the question mark, the site that linked to it, any campaign tags in the link (utm_source, utm_medium and utm_campaign), the width of your screen and which button or form it was. Your country comes from our hosting provider's network.

   We add each note to a daily total and keep only the totals, for 25 months. Nothing is stored in your browser, no ID is created, and your IP address is never kept with the counts, so we can't tell who you are or link your visits together. No other company receives these notes. If your browser sends a Do Not Track or Global Privacy Control signal, it sends nothing at all.

5. 05What we don't use

   • No analytics cookies or third-party analytics, such as Google Analytics.
   • No advertising or social media pixels.
   • No cookies that track you across other websites.

   If we add an analytics service, a campaign cookie or anything else stored in your browser later, we will list it here and on our sub-processors page before it goes live, and ask for your consent where the law requires.

6. 06Your choices

   You can block or delete cookies and site data in your browser settings. Blocking mv_region or the theme only changes which examples you see and how the site looks. Blocking the app's cookies stops you from signing in. Questions: hello@milvao.com, or read our privacy policy.