Cookie Policy
Version 4.2 · Effective 3 July 2026 · Last updated 15 October 2026
This document is published in English only, as it is in the Wevion app (app.wevion.ai/cookie-policy), where you accept it.
In short
Cookies and similar technologies keep you signed in, remember your preferences, help us understand how Wevion is used and measure our advertising. This policy covers two places that use different tools: the Wevion web app (app.wevion.ai) and our website (wevion.ai). On wevion.ai, no analytics or advertising tool runs before you make a choice in the cookie banner, and afterwards only the categories you accept start. In the Wevion web app, the cookie banner records your choice, but today it does not stop every analytics and advertising tool: Customer.io and partner attribution follow a refusal, while the other tools listed for the app run whatever you choose. You can object at any time by emailing privacy@wevion.ai. When you sign up, add a card to your trial or pay, our servers also send conversion data to Meta, TikTok and X, whatever you chose in the banner; section 2 and the Privacy Policy explain it. We never sell your personal information for money; some advertising tools (e.g., Meta Pixel, Google Ads) may count as "sharing" under California law.
- Website (wevion.ai): analytics and advertising cookies and pixels wait for your consent.
- Web app (app.wevion.ai): the banner records your choice; Customer.io and partner attribution follow a refusal, the other analytics and advertising tools do not yet.
- Mobile apps: the analytics and advertising tools listed for the web app do not run inside the Wevion mobile apps.
- Reopen your cookie preferences anytime: "Manage cookie preferences" at the bottom of this page in the app, "Cookie Preferences" in the website footer.
- To object to analytics or advertising in the app, or to opt out of "sharing", email privacy@wevion.ai.
What are cookies and similar technologies?
Cookies are small text files a website stores on your device through your browser. We use the term to also cover related technologies such as localStorage, sessionStorage, IndexedDB, pixels, and browser beacons. They can be first-party (set by Wevion) or third-party (set by a provider we use).
Cookies and similar technologies we use
We group cookies by purpose: strictly necessary, preferences, analytics, advertising and partner attribution. Durations are the ones we set, or the ones the provider documents; where a provider does not document a duration, we do not state one. This policy covers what is stored in or read from your browser. Separately, our servers send conversion data to Meta, TikTok and X when you sign up, add a card to your trial or pay: the Privacy Policy describes it in section 5.
2.1 In the Wevion app (app.wevion.ai)
The analytics and advertising tools below run only in the web app in production. They do not run inside the Wevion mobile apps.
Strictly necessary (always on)
| Name | Provider | Purpose | Storage and duration |
|---|---|---|---|
__Secure-better-auth.session_token | Wevion (set by api.wevion.ai) | Keeps you signed in | Cookie, 7 days, renewed while you use Wevion |
mediabuyer-auth | Wevion | Remembers your profile and the workspace you last selected | localStorage, until you sign out |
wevion-cookie-consent | Wevion | Stores your cookie choice | localStorage, until you clear it |
wv_nc | Wevion | Remembers that you refused partner attribution | Cookie on .wevion.ai, 365 days |
wv_cio_no | Wevion | Carries a refusal of Customer.io between the app and the website | Cookie on .wevion.ai, 365 days, written only after a refusal |
Stripe (__stripe_mid, __stripe_sid) | Stripe | Payments and fraud prevention when you add a card or pay | __stripe_mid 1 year, __stripe_sid 30 minutes |
featurebaseGlobalAuth, featurebaseIdentifyData, fb-messenger-* | Featurebase | In-app support chat | localStorage |
Preferences (always on, kept in your browser)
| Name | Provider | Purpose | Storage and duration |
|---|---|---|---|
mediabuyer-lang | Wevion | Interface language | localStorage, until you clear it |
wevion-ui, wevion-recent-accounts | Wevion | Interface preferences and the last ad accounts you selected | localStorage, until you clear it |
sidebar_state | Wevion | Remembers whether the sidebar is open | Cookie, 7 days |
Other interface preferences, such as mediabuyer-theme and wevion-recent-commands | Wevion | Theme, recent commands, table layouts and notices you closed | localStorage, until you clear it |
Analytics
| Name | Provider | Purpose | Storage and duration |
|---|---|---|---|
PostHog (ph_*) | PostHog | Product analytics and session recording | Cookie on .wevion.ai, 1 year, and localStorage |
Microsoft Clarity (_clck, _clsk, CLID) | Microsoft | Session recording and heatmaps | Set by Microsoft |
Google Analytics 4 (_ga, _ga_*) | Usage statistics | 2 years | |
Sentry Session Replay (sentryReplaySession) | Functional Software (Sentry) | Records a sample of sessions, with all text and inputs masked, to fix errors | sessionStorage, for the session |
Customer.io (ajs_anonymous_id, ajs_user_id) | Customer.io | Product events and messages about your account | Cookies on .wevion.ai, 365 days, and localStorage; follows a refusal in the banner |
Sentry error monitoring is always on and sets no cookies or browser storage.
Advertising
| Name | Provider | Purpose | Storage and duration |
|---|---|---|---|
Meta Pixel (_fbp, _fbc) | Meta | Conversion measurement | Set by Meta |
Google Ads (_gcl_au, _gcl_aw) | Conversion measurement | 90 days | |
TikTok Pixel (_ttp, ttcsid_*) | TikTok | Conversion measurement | 13 months from last use |
| X Pixel | X Corp. | Conversion measurement | Set by X |
Partner attribution
The wv_ cookies below are written by our link redirector (go.wevion.ai) on .wevion.ai when you click a partner's link or see a partner's tracked image, so before you reach the app or the website. Refusing marketing in the app's cookie banner, or attribution in the website's, deletes them and sets wv_nc. The other entries are written by the app when you arrive with a campaign link or a referral or partner code.
| Name | Provider | Purpose | Storage and duration |
|---|---|---|---|
wv_at | Wevion | Attributes your sign-up to the partner whose link you clicked | Cookie on .wevion.ai, 30 days |
wv_lm | Wevion | Measures the time between a partner-link click and a sign-up; it does not attribute | Cookie on .wevion.ai, 365 days |
wv_vt | Wevion | Records that you saw a partner's tracked image; used only when there is no wv_at | Cookie on .wevion.ai, 1 day |
wevion-utm, wevion-ref, wevion-partner-attr, wevion-partner-code | Wevion | Keep the campaign source, ad click identifiers and referral or partner code you arrived with, so your sign-up is attributed | sessionStorage for the session; the partner code in localStorage, up to 30 days |
2.2 On our website (wevion.ai)
Before you make a choice in the cookie banner, no analytics or advertising tool runs on the website. The exceptions are the attribution data in the table below, written when you arrive or when you click a partner link. Google Tag Manager, and with it Google Analytics and Microsoft Clarity, loads only if you accept analytics. If you accept only marketing, Google Ads starts without Google Tag Manager. After your choice, only the categories you accept start.
| Name | Provider | Purpose | Category | Storage and duration |
|---|---|---|---|---|
cc_cookie | Wevion | Remembers your cookie choice | Strictly necessary | Cookie, 365 days |
wv_consent_enforced_v2 | Wevion | Remembers which consent rules apply | Strictly necessary | localStorage |
wv_cio_no | Wevion | Carries a refusal of Customer.io between the website and the app | Strictly necessary | Cookie on .wevion.ai, 365 days, written only after a refusal |
wevion-lang-suggestion-dismissed | Wevion | Remembers that you closed the language suggestion | Strictly necessary | localStorage |
wevion_pricing_currency_url, wevion_scroll_handoff | Wevion | Remember the pricing currency from a link and the scroll position | Preferences | sessionStorage |
| Google Tag Manager | Loads measurement tags, including Google Analytics and Microsoft Clarity | Analytics | Sets no cookies of its own; loads only after you accept analytics | |
Google Analytics 4 (_ga, _ga_*) | Website statistics | Analytics | 2 years, only after consent | |
Microsoft Clarity (_clck, _clsk, CLID, MUID, ANONCHK, MR, SM) | Microsoft | Session recording and heatmaps | Analytics | Set by Microsoft, only after consent |
PostHog (ph_*) | PostHog | Product statistics and session recording | Analytics | Cookie on .wevion.ai, 365 days, and localStorage, only after consent |
Customer.io (ajs_anonymous_id, ajs_user_id) | Customer.io | Pages, events and the identity of people who contact us, for our messages | Analytics | Cookies on .wevion.ai, 365 days, and localStorage, only after consent |
Sentry Session Replay (sentryReplaySession) | Functional Software (Sentry) | Records a sample of sessions, with text and inputs masked | Analytics | sessionStorage, for the session, only after consent |
Google Ads (_gcl_au, _gcl_aw, _gcl_gs) | Conversion measurement and remarketing | Advertising | 90 days, only after consent | |
Meta Pixel (_fbp, _fbc) | Meta | Measurement and retargeting | Advertising | Set by Meta, only after consent |
TikTok Pixel (_ttp, ttcsid_*, ttclid, _pangle) | TikTok | Measurement and retargeting | Advertising | 13 months from last use, only after consent |
| X Pixel | X Corp. | Measurement and website audiences | Advertising | Set by X, only after consent |
OpenAI Ads (__oppref, __obref) | OpenAI | Conversion measurement | Advertising | 30 days and 365 days, only after consent |
wevion_utm_*, wevion_gclid, wevion_fbclid, wevion_msclkid, wevion_ttclid, wevion_twclid, wevion_ref, wevion_site_referrer, wevion_signup_event_id | Wevion | Pass the campaign source, ad click identifiers and referral code to the app when you go on to sign up, and keep one sign-up from being counted twice | Attribution | sessionStorage, until you close the tab; written when you arrive, before your choice |
wv_at, wv_lm, wv_vt | Wevion | Partner attribution, as described in 2.1 | Attribution | Written by go.wevion.ai, as described in 2.1 |
Sentry error monitoring is always on and sets no cookies or browser storage. The newsletter form sends the email address you enter to Klaviyo only when you submit it; Klaviyo sets no cookies on the website.
Your choices
We show a notice at the point of collection (cookie banner) with the categories we use and a link to this policy. What the banner controls is described in Section 2.
- EU/UK/EEA (GDPR + ePrivacy). On wevion.ai, analytics and advertising cookies and pixels wait for your opt-in in the banner. In the Wevion web app, the banner records your choice, but only Customer.io and partner attribution follow a refusal today; you can object to the other tools by emailing privacy@wevion.ai.
- California (CCPA/CPRA). A self-service "Do Not Sell or Share My Personal Information" link and automated Global Privacy Control (GPC) handling are not available; you may opt out of any "sharing" by emailing privacy@wevion.ai.
- Other US states (Virginia, Colorado, Connecticut, Utah, and comparable laws). Comparable opt-out mechanisms apply.
- Rest of world (e.g., LGPD in Brazil). Opt-in for marketing and analytics where required by local law.
- Granular control. Use "Manage cookie preferences" at the bottom of this page in the app, or "Cookie Preferences" in the website footer, at any time, or clear cookies and storage through your browser settings.
Withdrawing consent
You can reopen your cookie preferences at any time to review and update your recorded choice (GDPR Art. 7(3)). On wevion.ai, the tools of a category you withdraw no longer start on the pages you visit afterwards. In the Wevion web app, withdrawing records your new choice and stops Customer.io and partner attribution; for the other tools, or to have a data access, deletion, or opt-out request applied, email privacy@wevion.ai; we action such requests without undue delay and within the time limits set by applicable law. Withdrawal does not affect processing that was lawful before you withdrew.
Meta Business Tools and joint controllership
When you, as a Wevion customer, enable Meta Business Tools (Pixel, Conversions API/CAPI) for your own campaigns through the platform, you and Meta may act as joint controllers under GDPR Art. 26 (see Meta's controller-to-controller / joint-controller terms). You are responsible for collecting valid consent from your own website or app visitors before activating Pixel/CAPI, and for keeping evidence of that consent. Wevion acts as your Service Provider / Processor and operates these tools on your documented instructions. See the Terms of Service and Privacy Policy for the full allocation of roles.
Data transferred via cookies
Bhblasted SRL SB is an Italian company; some cookies transmit data to servers in the United States or processed globally by our providers. These transfers rely on the mechanism shown for each provider in the Sub-processors list, an adequacy decision such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses; where the list shows a mechanism as not yet confirmed, we have not yet completed that check.
Global Privacy Control and Do Not Track
- GPC. We recognize the Global Privacy Control as a valid opt-out mechanism for the sale/share of personal information. Automated detection and honoring of the GPC signal is not implemented; email privacy@wevion.ai to exercise an opt-out.
- Do Not Track (DNT). DNT is a legacy, non-standardized signal that we do not act on. Use GPC if your browser supports it.
Changes to this Cookie Policy
We update this policy when cookies or providers are added or removed. Material changes are notified in-app. The version, effective date, and last-updated date at the top always reflect the current version.
Contact
Questions about cookies or privacy: privacy@wevion.ai Bhblasted SRL SB · Via Boscofangone SNC, Zona ASI, Lotto C8, 80035 Nola (NA), Italy · VAT IT08466861211