1. Summary
Cookies we setNone. The Vively website does not set any first-party cookies.
Analytics / adsNone. There is no Google Analytics, Meta Pixel, heat-map tool or advertising network on the site.
Consent bannerNot shown, because nothing optional is loaded. Everything listed below is needed for a feature you actively use.
Third partiesGoogle Sign-In (only when you open the login dialog), the jsDelivr font CDN and Cloudinary image hosting. See section 3.
2. What we store in your browser
Instead of cookies the site uses your browser's local storage. These values never leave your browser except when your browser sends the session token to our API to prove you are logged in.
| Key | Purpose | Lifetime | Type |
|---|---|---|---|
vively_user_token | Your creator login session (a signed token; contains your account ID, email and role) | Until you log out, delete your account, or the token expires after 7 days | Essential |
vively_user_data | Your username/name/email so the header can show that you are logged in without an extra request | Until log out | Essential |
vively_ref_code | Remembers a referral code from a link you opened (vivelyglobal.com/?ref=…) so it can be pre-filled if you sign up | Until you finish sign-up or clear site data | Functional (set only when you open a referral link) |
brandToken, brandData | Brand-portal login session and company name | Until log out or 7 days | Essential (brand portal only) |
adminToken, adminUser | Admin-panel login session | Until log out or 7 days | Essential (Vively staff only) |
Nothing is stored in sessionStorage or IndexedDB.
3. Third-party scripts & resources
| Service | When it loads | What it may do |
|---|---|---|
Google Identity Services (accounts.google.com/gsi/client) | Only after you open the "Login" dialog. It is not loaded on page view. | Renders the "Continue with Google" button. Google may set its own cookies and receive your IP address under Google's privacy policy. If you never open the login dialog, nothing is loaded. |
jsDelivr CDN (cdn.jsdelivr.net) | On every page | Serves the Pretendard web font. jsDelivr receives your IP address and browser details for that request. TODO: consider self-hosting the font to remove this request |
Cloudinary (res.cloudinary.com) | When a page shows an uploaded campaign image or profile picture | Serves the image; receives your IP address for the request |
Google profile pictures (lh3.googleusercontent.com) | On My Page / brand dashboard if the account uses Google Sign-In | Serves the picture. We request it with referrerpolicy="no-referrer" so the page URL is not sent |
Tally forms (tally.so) | Not currently used. The code can embed a Tally form if one is configured; no page does today | Would load an iframe from Tally if enabled |
4. How to clear or block
- Log out removes the session keys listed above.
- Your browser's "clear site data" / "clear browsing data" option removes everything in local storage for vivelyglobal.com. You will need to log in again.
- You can block third-party scripts with a content blocker. Blocking
accounts.google.comdisables Google Sign-In only; email/password login still works. Blockingcdn.jsdelivr.netmakes the site fall back to your system font.
5. If this changes
If Vively ever adds analytics, advertising or other non-essential tracking, we will update this page, add a consent dialog that lets you accept or decline before anything loads, and give you a way to change that choice later.