Cookie Policy

What cookies are

Cookies are small text files that a website stores on your device when you visit. They allow a site to recognize your browser across requests and remember state between sessions. Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (stored for a defined period). We also use a browser storage mechanism called localStorage for preferences that do not need to travel to our servers.

Cookies we use

Sova keeps its use of cookies minimal. We set no advertising or cross-site tracking cookies, and we do not share cookie data with ad networks. Every cookie or local storage item we set is listed below.

Essential cookies

These cookies are required for the service to function. You cannot opt out of them while using Sova.

• next-auth.session-token (or __Secure-next-auth.session-token on HTTPS). Set by NextAuth.js when you sign in. Holds your encrypted session identifier so the server can recognize authenticated requests. Without this cookie, the authenticated parts of Sova, including your dashboard, saved decisions, and settings, will not work. This cookie is HttpOnly and Secure: it cannot be read by JavaScript and travels only over HTTPS. It expires when you sign out or after 30 days of inactivity.
• next-auth.csrf-token. Also set by NextAuth.js. Guards sign-in and sign-out form submissions against cross-site request forgery. This is a session cookie that clears when you close your browser.
• sova_usage. Set when you use a metered feature on a free account, for example submitting signals on the free tier. Stores a usage count so we can enforce plan limits without a full database round-trip on every request. No personal information is stored inside this cookie. It expires after 30 days and is cleared on a plan upgrade.

Preference storage

• theme (localStorage, not a cookie). Set by next-themes when you choose light or dark mode. Stored in your browser's localStorage and never sent to our servers, so your theme choice persists across sessions without affecting your privacy. You can clear it at any time through your browser's developer tools or storage settings.

Analytics

We collect minimal usage analytics, including page views, feature interactions, and error rates, using server-side event logging and aggregated metrics. These are not tied to advertising identifiers and do not involve a third-party analytics cookie placed on your device. We do not use Google Analytics, Meta Pixel, or similar third-party tracking scripts that set cookies.

Managing cookies

You can control cookies through your browser settings. Most browsers let you view, block, or delete cookies at any time. Because the cookies Sova sets are essential or preference-only, blocking them will prevent sign-in and impair access to authenticated features.

Browser documentation for managing cookies and local storage:

• Google Chrome
• Mozilla Firefox
• Apple Safari

We do not sell personal information, so there is no advertising opt-out required. We set no advertising cookies.

Changes

If we add new cookies or change how we use existing ones, we will update this page and revise the date at the top. Material changes that affect essential cookies will be communicated to account holders by email before taking effect.

Contact

Questions about our cookie practices? Contact us at privacy@sovasignals.com.

Sova, Inc.
254 Park Avenue South, Suite 705
New York, NY 10010
United States