Legal

Cookie policy

Only the cookies Mivva needs: to keep you signed in safely and to keep payments free of fraud. No tracking, no advertising, no analytics.

Last updated

01What cookies are

Cookies are small text files that a website saves in your browser. Similar technologies, such as local storage, work in much the same way. In the UK, the Privacy and Electronic Communications Regulations (PECR) and UK GDPR set the rules for using them. This policy covers the Mivva website and app, which are run by One Rectangle Limited.

02The cookies we use

Signing in and starting a book

Cookies set by Mivva
NameWhat it doesHow long it lasts
sb-[project]-auth-tokenKeeps you signed in securely as you move between pages. It may be split into numbered parts (ending .0, .1) when the sign-in data is large.Until you sign out, or up to 400 days
mivva_last_activeRecords when you last used Mivva, so we can sign you out after 24 hours without activity. It holds a time, nothing else.Deleted when you sign out, or up to 400 days
mivva_pending_promptHolds the book idea you typed on the home page while you sign up, so it is waiting in the New book box. Only set when you press Start my book there.Deleted once New book shows it, or after 1 day

These are first-party, strictly necessary cookies. They are set on the Mivva domain when you sign in, create an account or press Start my book on the home page. They are not used to track you across other websites. Visitors who do none of these get no cookies from Mivva.

Paying

Cookies set by Stripe on the wallet page
NameWhat it doesHow long it lasts
__stripe_midHelps Stripe recognise your device so it can spot and block fraudulent payments.1 year
__stripe_sidDoes the same job for a single visit.30 minutes

Our payment provider, Stripe, sets these on the wallet page, where you top up. They are strictly necessary to keep payments safe from fraud. Stripe's payment form may also set cookies on Stripe's own domains, as its cookie policy (opens in a new tab) explains. Stripe does not use them for advertising.

03What we do not use

Mivva does not use:

  • analytics cookies or visitor tracking
  • advertising or retargeting cookies
  • social media pixels or embedded tracking
  • device fingerprinting to track you (Stripe's device checks are only used to stop payment fraud)
  • local storage to identify or follow you

When something breaks, our error monitoring records technical details on our servers. It does not place cookies in your browser.

04Why there is no cookie banner

PECR lets websites set cookies without asking when they are strictly necessary to provide a service you have asked for. Keeping you signed in securely, keeping the book idea you asked us to start with, and keeping your payments safe are exactly that. As we set no other cookies, there is nothing to consent to, so we do not show a banner that would only get in your way.

05If this changes

If we ever want to use a cookie that is not strictly necessary, such as for analytics, we will:

  • update this policy before it goes live
  • ask for your permission before setting it
  • make accepting and rejecting equally easy, with no pre-ticked boxes
  • let you change your mind at any time from a link on every page

06How to control cookies

You can block or delete cookies in your browser settings. If you block the sign-in cookies, you will not be able to sign in to Mivva, although you can still read the public pages. If you block Stripe's cookies, payments may fail. Signing out deletes Mivva's cookies straight away.

The ICO has plain-English guidance on cookies (opens in a new tab) and how to manage them.

07Other websites

Some pages link to other websites, such as Companies House, the ICO and Amazon. Those sites set their own cookies under their own policies, which we do not control.

08Questions

Email hello@orlimited.com with any question about cookies. Our privacy policy explains how we handle personal data more broadly.