Cookie Policy

Category	Default	What it covers
Necessary	Always on	Keeping you signed in after Avonao ID has signed you in, security, routing you to the right region, remembering the preferences you set and remembering your cookie choices. Cannot be turned off.
Statistics	Off until you allow it	Google Analytics, which measures which pages are visited and how visitors move around.
Fonts	Off until you allow it (EU, EEA, Switzerland and UK only); elsewhere loaded directly, with no choice	The typeface of our titles, loaded from Adobe Fonts. Without it, titles use our own font.
Marketing	Off	None. We load no advertising scripts. Switching this category on only tells Google's consent signals that you allow it; nothing else is loaded.

Name	Purpose	Duration	Type
`itml_session`	Keeps you signed in to the dashboard. Set after Avonao ID has signed you in; holds a random token (only its hash is stored by us), not personal data.	Up to 12 hours (and ends after 30 minutes of inactivity)	Cookie, HttpOnly
`itml_mfa`	Carries a second-factor challenge while you complete it.	10 minutes	Cookie, limited to the sign-in path
`av_oauth_state`	Protects a third-party or single sign-on hand-off against forgery.	About 11 minutes	Cookie, HttpOnly
`tv_avonao_flow`	Protects the hand-off to and from Avonao ID against forgery while you sign in.	10 minutes	Cookie, HttpOnly
`tv_avonao_onboard`	Remembers which step of choosing your plan and region you have reached while you create your account.	30 minutes	Cookie, HttpOnly
`tv_avonao_idt`	Holds a hint from Avonao ID that lets us sign you out there as well.	30 days	Cookie, HttpOnly
`av_dashboard_residency`	Remembers the region you picked at sign-up or are served from, so that requests reach the right regional host.	About 400 days	Cookie
`av_cross_region_tabs`	Remembers, if you switch it on, that tabs for other regions may open in the same window.	About 400 days	Cookie
`itml_gate`	Records that you passed the site access gate. Set only when an access gate is switched on for a site.	7 days	Cookie, HttpOnly
`stcm.v2.consent.*` and `stcm.v2.gpc`	Remember your cookie choices and whether your browser sends Global Privacy Control.	Until you clear browser storage	Local storage
`stcm-dismissed-v2`	Remembers that you closed the cookie prompt, so it does not reappear during this visit.	Browser session	Session storage

Name	Purpose	Duration	Type
`av_locale`	Your language.	1 year	Cookie
`av_theme`, `av_tz`, `av_currency`	Your theme, time zone and display currency.	1 year	Cookie
`av_ref`	Records the referral code from a link you followed (`?ref=`), so that the referral can be credited if you sign up.	30 days	Cookie, readable by the page
`av_ws_last_used`	The workspace you used last, for a shortcut after sign-in.	Until you sign out or change it	Cookie
`av_region_banner_collapsed`	Remembers that you collapsed the region notice.	180 days	Cookie
Interface settings, such as contrast, title font, dashboard view mode, table columns, recent searches, the last page visited, onboarding and sign-up progress, notifications you have seen, the preferred code-sample language in the documentation, and drafts you have not yet sent (keys beginning `tv.` or `av_`)	Keep the interface as you left it and let you resume a sign-up or a form.	Until you clear browser storage; progress and drafts are removed when completed	Local storage, and session storage for the current visit; stored on your device and not sent to us

Name	Purpose	Duration	Type
`_ga`	Google Analytics: distinguishes visitors.	Up to 2 years	Cookie, first party, set by Google LLC's script
`_ga_*`	Google Analytics 4: keeps session state for our measurement property.	Up to 2 years	Cookie, first party, set by Google LLC's script

In the EU, the EEA, Switzerland and the UK, loaded only after you allow Fonts. Elsewhere it loads right away and the settings have no Fonts category. Our titles use the typeface "ivypresto-display" from Adobe Fonts. Your browser then loads a stylesheet and font files from use.typekit.net, and Adobe Inc. receives your IP address, the address of the page and your browser type. Adobe Fonts sets no cookies and stores nothing on your device. Without your consent in those countries, the titles use our own font and no request goes to Adobe for it. See Sub-processors.

Cloudflare Turnstile runs on sign-up and on the contact, support, abuse-report and security-report forms to tell people from bots. Your browser loads a script from challenges.cloudflare.com and Cloudflare receives the signals needed to run the check. It is a security function and is not used for advertising.
Avonao Billing hosts the payment screens, invoices and plan changes. When you follow a link to it you leave our site, and the terms and cookies of Avonao Billing and of Stripe, the merchant of record there, apply.
Sign-in with Avonao ID takes you to id.avonao.com, where Avonao ID's own cookies apply (section 4.6). If you connect a third-party account there, that provider's own cookies apply on Avonao ID's pages, not ours.

1. Our approach#

Agenten handeln, wenn die Ebene Ja sagt – und das Protokoll sagt, warum.

2. What are cookies and browser storage#

3. Categories#

4. Cookies and storage entries we set#

4.1 Necessary#

4.2 Preferences#

4.3 Statistics#

4.4 Fonts#

4.5 Marketing#

4.6 Avonao ID#

5. Changing or withdrawing your choice#

6. Global Privacy Control#

7. Other third-party requests#

8. Changes#

9. Contact#

Hinweis zu Marken

Region

Sprache wählen

EU notices

Receipt practices

Program terms