The short version
Provenfolio keeps tracking to a minimum. The only cookies we set are the ones needed to sign you in and to remember your privacy choice. For understanding traffic we use cookieless analytics that don’t identify you and don’t set any cookie. We never sell your personal data.
Your choice
Visitors in the EU, EEA, UK and Switzerland are asked to opt in before any analytics runs. Elsewhere, analytics is on by default and you can turn it off. Either way you can change your mind at any time: .
Strictly necessary & functional
These make the site work and can’t be switched off. Under GDPR/ePrivacy they’re exempt from consent.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token | Strictly necessary | Keeps you signed in and secures your session. Set only after you log in. | 7 days |
| next-auth.csrf-token / callback-url | Strictly necessary | Protects sign-in against cross-site request forgery. | Session |
| pf_consent | Functional | Remembers your cookie choice so we don’t ask again. Stores only on/off flags — no personal data. | 180 days |
| pf_region | Functional | A coarse “EU / rest-of-world” hint so we show the right consent default. Never stores your country or IP. | 1 year |
Analytics (optional)
Only active when you allow it (and, outside opt-in regions, until you turn it off). Provided by Vercel — both are cookieless.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| Vercel Web Analytics | Analytics (cookieless) | Aggregated page views and referrers. Uses no cookies and no cross-site identifiers. | No cookie stored |
| Vercel Speed Insights | Analytics (cookieless) | Real-user performance metrics (Core Web Vitals) to keep the site fast. | No cookie stored |
Contact
Questions about this policy: privacy@provenfolio.com