Cookie Policy

This policy explains what cookies and similar technologies we use in the Arvis Loft app, why, how long they remain stored and how you can manage your consent. It is drafted in accordance with Legea 506/2004 (ePrivacy) and Regulation (EU) 2016/679 (GDPR).

1. What cookies are

Cookies are small text files, stored by the browser on your device, that a website or app can read on subsequent visits. They help the app keep you logged in, remember your preferences (language, theme) and, if you agree, give us statistics about how the product is used. We also use similar technologies (for example localStorage), which we treat the same as cookies in this document.

2. How we ask for consent

For cookies that are not strictly necessary (for example analytics cookies), we ask for your consent before enabling them, through a banner displayed on your first visit. The banner offers, side by side and equally accessible, "Accept all" and "Reject optional", plus "Customise" for a choice per category.

Until you choose, nothing optional is enabled. Refusing does not restrict your access to the app in any way. Strictly necessary cookies are exempt from consent (Art. 4 para. (6) of Legea 506/2004), because without them the app simply does not work; we list them in full in section 3.

You can change your mind at any time, as easily as you accepted (Art. 7(3) GDPR): from the cookie button in the footer of our public pages, or in Settings → Privacy if you are signed in. If you withdraw consent, we delete the cookies the analytics tool has already written.

3. What cookies we use

Necessary cookies (no consent required)

Essential for the app to function: authentication, basic preferences and remembering your consent choices.

The arvis_ref cookie is set only if you reach the site through an invitation link. It is necessary to operate the referral programme (it has no advertising purpose and does not track your behaviour on other sites), which is why we treat it as strictly necessary for that feature. If you would rather the invitation was not attributed to you, you can delete the cookie in your browser settings or open the site in a private window. Details in the Referral Programme Terms.

Analytics cookies (only with consent)

They help us understand how the app is used, so we can improve it. They are enabled only if you accept them.

Services that do not use cookies

One service runs in the app that does not write anything to your device, but does receive technical data when something breaks. We list it here for transparency, even though it is not a cookie.

Sentry sets no cookies, does not identify you and does not track you across sites. Its servers are in the European Union.

Load-speed measurement (performance data) is enabled only if you accept analytics cookies. Error reporting stays on without consent: without it we would not know the app broke for you, including on public pages, where you have not yet had the chance to choose.

Marketing cookies

We currently do not use marketing cookies. This category is prepared for the future; if we enable it, we will update this document and ask for your consent.

4. What we do NOT use

Unlike a classic online shop, we do not use Google Analytics, Facebook Pixel or Google Ads, and we do not track your behaviour on other sites. Analysis of how the app is used is done exclusively through PostHog, only with your consent. Separately from analytics, so that the app works correctly, we use Sentry, which records technical errors rather than your behaviour (see section 3). Until you give it, PostHog is not loaded at all: no cookie is written and no request is sent to it.

5. How to withdraw or change your consent

You can change your choices at any time:

• from the cookie banner, or
• in the app, in Settings → Privacy.

You can also manage cookies from your browser settings (Chrome, Firefox, Safari, Edge), where you can delete or block them. Note that blocking strictly necessary cookies may prevent login and the proper functioning of the app.

6. Cookies and personal data

Some cookies may process personal data (for example session identifiers). The way we process this data is described in the Privacy Policy. Your GDPR rights are detailed in the GDPR Policy / Your Rights.

7. How we keep proof of consent

Art. 7(1) GDPR requires us to be able to demonstrate that you gave consent. So each time you choose, change or withdraw your options in the banner, we separately record: the categories chosen, the version of this policy, the moment, the IP address and the browser type.

This record is historical and is not modified: each of your decisions adds a new entry rather than overwriting the previous one. We keep it for 3 years after your last interaction with the service and use it solely as evidence, never for profiling or marketing.

The current state of your options is the one in the cookie on your device; the record above is only the history.

8. Changes to this policy

We may update this policy when we add or remove cookies. The current version, with the date of the last update, is always published on this page.

For material changes, such as adding a new category of cookies that are not strictly necessary or changing the analytics provider, we notify you at least 30 days in advance, by e-mail and through a banner in the app, and we ask you to choose again. For minor changes, such as a correction or a clarification that does not change a cookie's purpose, we inform you without asking you to choose again. This is the same rule as in the Terms and the Privacy Policy.

Questions about cookies? Write to us at privacy@arvis.ro or on WhatsApp at +40 741 250 134.