Cookie policy

These are set only when the thing they support happens, and they cannot be switched off, because the product does not work without them. None of them is used to follow you around the site or anywhere else.

• Your session (sb-…-auth-token, first party). Keeps you signed in between pages. Set when you sign in; kept up to 400 days with Keep me signed in ticked, or until you close the browser without it. Lifetime to be confirmed by counsel.
• Keep me signed in (revanu-keep, first party). Remembers whether you ticked Keep me signed in, so the session cookie lasts the right length. Set when you sign in; 400 days. Lifetime to be confirmed by counsel.
• Recent password check (revanu-stepup, first party, not readable by scripts). Proves you re-entered your password before opening the deal room or a deal document. 30 minutes.
• This choice (revanu-consent, first party). Records the answer you give in the cookie bar, so it is not asked again — without it there is nowhere to record a refusal. 12 months. Lifetime to be confirmed by counsel.
• Reviewer access (revanu-internal-reviewer, first party, not readable by scripts). Revanu staff only, on the internal review pages. 8 hours.
• Within a single step of a form, some information is held in your browser tab and discarded when you close it: the email address you typed on the sign-in screen, where you are in email confirmation, the names of documents you are about to send for verification, and your place in the listing wizard. None of it is kept after the tab closes.

If you turn Preferences on, a draft offer you save stays in this browser until you send or clear it, and it never reaches the other side. Nothing is written until you turn it on. Dark mode is not a cookie: it is a setting on your account, kept in our database, and a visitor who is not signed in has no theme to store.

If you turn Analytics on, your browser tab holds a random key that groups one visit's events, and it is discarded when the tab closes. Events such as opening a calculator are sent to Revanu's own database — never to an analytics company — and they carry no account, no IP address and no browser details. Nothing is recorded until you turn it on, and turning it off stops it straight away.

Revanu uses Sentry to report errors in the product, so problems are found even when nobody writes in about them. It runs whether or not you accept analytics, on the basis of Revanu's legitimate interest in keeping the product working; counsel is to confirm that basis. It stores nothing on your device and sets no cookie. When something breaks, a report goes through revanu.com to Sentry, in the United States. Reports are stripped of cookies, form contents and search terms, and are configured not to include what you type into a form. There is no session recording and no measurement of how fast pages load.

Any cookies here are the provider's, set under its own policy and only once you begin the step that needs them. Revanu does not read them.

• Plaid, if you choose to connect a bank account to verify your funds. Plaid's window is loaded from Plaid and may set Plaid's own cookies.
• Persona, if you check your identity. You are taken to Persona's own site for the check, where Persona may set its own cookies.

Revanu sets no advertising cookies and no cookies that follow you to other sites, loads no advertising or analytics scripts from other companies, and does not sell behavioural data.

Cookie settings, in the footer of every page, reopens the choices with your current answer shown, and withdrawing is one click. If your choice cannot be saved, nothing outside the strictly necessary set runs and the bar tells you. Browser controls can also block or delete cookies; blocking the strictly necessary ones will prevent signing in.