Last updated:
Cookie notice
Loyever uses the cookies the service needs to work, and Google Analytics cookies only if you allow them. Nothing for analytics loads before you say yes, and you can change your mind at any time.
What a cookie is here
A cookie is a small file a website asks your browser to keep and send back on the next request. It is how a site can remember that you are signed in, or that you chose Azerbaijani.
This notice covers the marketing site (loyever.com), the dashboard (app.loyever.com) and the join pages your customers use. It sits alongside our privacy notice, which says what we do with personal data more generally.
The marketing site sets no cookie in order to show you a page: the language is part of the address, not a cookie. The only thing it may store by itself is a note of which advert or link brought you here, described below.
The cookies the service needs
| Name | Set by | What it is for | How long it lasts |
|---|---|---|---|
__Secure-better-auth.session_token | Loyever (app.loyever.com) | Keeps you signed in to the dashboard. Set when you sign in, removed when you sign out. | 7 days |
lv_lang | Loyever (app.loyever.com) | Remembers whether you chose Azerbaijani or English in the dashboard. | 1 year |
__cf_bm | Cloudflare | Tells people and bots apart, to keep our sites up and the waitlist clean. | 30 minutes |
cf_clearance | Cloudflare | Records that a browser passed one of Cloudflare’s own security checks, so it is not asked again. | Set by Cloudflare; short-lived |
The two Loyever cookies cannot be read by scripts in the page (they are set as httpOnly), they are sent only to our own sites, and over https only. They hold no name, no email address and nothing about what you do on the site.
Our staff console at admin.loyever.com uses its own session cookie of the same kind. It is only ever set for our own staff.
Analytics and your choice
We want to know how businesses find Loyever and which pages help them decide. That needs Google Analytics, and it is not loaded until you accept it. Before you do, there is no Google Analytics on the page and no request is made to Google — not even one saying that you refused. We run no advertising tag and no social-network pixel.
| Name | Set by | What it is for | How long it lasts |
|---|---|---|---|
lv_consent | Loyever (loyever.com, app.loyever.com) | Necessary. Records which of these you allowed, so you are not asked again on every page. | 180 days |
lv_attr | Loyever (loyever.com) | Functional, first party. Which campaign brought you here; no identifier of any kind. Set only when you arrive from a campaign link, and never changed afterwards. | 90 days |
_ga | Google LLC (Google Analytics) | Analytics. Tells one browser from another, so visitors can be counted rather than visits. | 2 years |
_ga_<id> | Google LLC (Google Analytics) | Analytics. Holds the state of a Google Analytics session for our property. | 2 years |
The two Loyever cookies in that table are set whatever you choose, because neither one watches you: lv_consent is the record of your own answer, and lv_attr holds the campaign words from the link you followed. Both are first party, both can be read by the page, and neither is sent to anybody else.
The Google cookies are a different matter. While analytics is switched on, Google receives your IP address and which of our pages you viewed, and it may process that data outside Azerbaijan, on its own terms and as a controller in its own right. What it does with it is set out in its own policy:
Google: policies.google.com/privacy.
You can change or withdraw your choice at any time with “Cookie settings” at the bottom of any page on this site. When you switch something off we delete the cookies it set, as far as a page is allowed to, and reload the page so its scripts are gone.
What we still do not do
The measurement described above runs on this marketing site and on the signed-out and setup screens of app.loyever.com, where an account is created. It is never loaded on the dashboard pages that show your members, and never on the join pages your customers use: nothing a customer of yours does with their card is measured by Google.
We do not sell or share data about visitors. Apart from Cloudflare’s anti-bot check and, once you accept them, the tags above, we run no third-party script on our pages.
Cloudflare
Our sites are delivered through Cloudflare, Inc., which also protects them from attacks and from automated abuse. Cloudflare sets the two cookies above by itself, as part of that protection, and we cannot switch them off for a visitor.
Where a form has to be protected from bots — the waitlist form while a market has no prices yet, and the join page where your customers add a card — we run Cloudflare Turnstile, a check that confirms a person and not a bot filled it in. It loads a script from Cloudflare and may set the cookie above.
What Cloudflare processes for us is described in our privacy notice.
How to refuse them
Every browser lets you block or delete cookies, for all sites or for one. Look for “Cookies and site data” under privacy settings.
If you block them for our sites: the marketing site keeps working normally, but you cannot stay signed in to the dashboard (it will send you back to the sign-in page), the dashboard forgets your language, we cannot remember your cookie choice so you will be asked again, and Cloudflare may show its security check more often or refuse the waitlist form.
Language
This notice exists in Azerbaijani and in English. For customers in Azerbaijan the Azerbaijani text prevails; the English text is a translation, provided for convenience.
You can read the Azerbaijani version of this notice here.
Contact
The sites described here are run by the seller of the Loyever service:
Seller: Elvin Latifzada, sole proprietor registered in Azerbaijan, taxpayer ID (VÖEN) 1605412122
Address: 13a Mehdi Abbasov Street, Baku, Azerbaijan
Questions about this notice: hello@loyever.com.