Cookie Policy

Effective date: 25 September 2026

Last updated: 9 October 2026

This Cookie Policy explains what cookies are, how Gohvio, Inc. ("Gohvio", "we", "us") uses them on gohvio.io, the kinds we use (necessary, functional and analytics), and how you can change your choice at any time. It names every item by name, because a company that sells traceability should be able to trace its own website.

It sits alongside our Privacy Policy, which covers personal data generally, including the usage analytics inside the signed-in app at app.gohvio.io. If the two ever disagree, tell us and we will fix whichever is wrong.

The short version. Three tools measure how this site is read once you accept analytics: Google Analytics, HubSpot's tracking script and our own visit tracker. None of them stores anything in your browser before you accept, and HubSpot and our visit tracker are not even loaded until then. Two measurements do not wait for you: Google Analytics' tag loads on every page and sends Google a cookieless signal that a page was viewed, and Cloudflare, our host, measures every page at its own edge. Section 3.4 explains both. Nothing here advertises to you, and nothing is sold.

1. What are cookies?

A cookie is a small text file that a website saves in your browser when a page loads, so it can remember something about your visit later. Sites use them to work properly, to stay secure, to make the next visit smoother, and to measure what is working and what is not.

Browsers offer other ways to do the same job, such as local storage and session storage, and a script can measure a visit without storing anything at all. A policy that covered only cookies in the strict sense would be accurate and not much use. So on this page "cookie" means anything kept in your browser for these purposes, and section 3.4 also covers measurement that stores nothing.

2. How do we use cookies?

We use first-party items, which gohvio.io sets itself, and third-party ones, which other companies set through scripts on our pages. Our first-party items keep the site working and remember your choices; the ones in 3.1 and 3.2 say nothing about who you are. They stay on gohvio.io, with one exception: gohvio_utm (the campaign tags and any Google Ads click ID, gclid) is added to the link to the app's signup page, so the campaign that brought you is credited. The third-party ones, and our own visit tracker, help us understand how the site is read so we can improve it. All of those wait for your consent.

There is no sign-in on this site. The product lives at app.gohvio.io, a separate address with its own session cookie, and this page does not cover it.

3. Types of cookies we use

3.1 Necessary

Needed for the basics, such as remembering your consent choice. They cannot be switched off, because switching them off is the same as not having them: the banner would ask on every page. They hold nothing that identifies you.

Name	How long	What it is for
`cookie_consent`	Until you change it or clear your browser data	Local storage, set by gohvio.io. Your answer to the cookie banner, either all or essential, so we stop asking.
`gohvio-theme`	Until you clear your browser data	Local storage, set by gohvio.io. Light or dark. Written on your first visit so the page does not flash the wrong theme, and updated if you switch.

3.2 Functional

Functional cookies support extra features, such as social sharing buttons or feedback tools. We use no third-party functional cookies. One first-party item fits here, and like the necessary ones it is stored whatever you choose on the banner, because it is not analytics and the banner offers no way to decline it. It goes only to our own app's signup page (see section 2), and to no one else.

Name	How long	What it is for
`gohvio_utm`	Until you close the tab	Session storage, set by gohvio.io on the trial page only, and only if you followed a campaign link. Remembers which campaign brought you, so we can credit it.

3.3 Analytics

Analytics tell us how visitors use the site: how many there are, where they came from, and which pages they read or leave. Nothing in this section is stored until you accept analytics.

Our own visit tracker. A script served from app.gohvio.io/t.js. It is not added to the page at all until you accept, and it checks your choice again before recording anything, so it stops the moment you withdraw. It does nothing at all if your browser sends Do Not Track or Global Privacy Control, and it runs only on gohvio.io. It sets no cookies. What it records:
- The pages you view and their titles, the links and buttons you click, how far you scroll, and how long you stay.
- The page you came from and any campaign (UTM) tags in the link you followed.
- Your timezone, language, screen and window size, and your browser's full user agent.
- A score for whether the visit looks automated, and the reasons for it, so bots can be left out of our numbers.
It never records what you type into a form, and an email address that appears in a link is replaced before anything is sent. The records go to our own database and are never shared or sold, or used to follow you to other websites.
Google Analytics 4. Its tag runs in Google's consent mode with analytics_storage: denied until you accept. After that it sets the two cookies below.
HubSpot tracking script. Not added to the page until you accept. Then it loads from js.hs-scripts.com, js-na2.hs-analytics.net and js-na2.hs-banner.com, and sets the four HubSpot cookies below.

Name	How long	What it is for
`gohvio_t_session_id`	Until you close the tab	Session storage, set by our own visit tracker. A random ID that ties the pages of one visit together.
`gohvio_t_session_start`	Until you close the tab	Session storage, set by our own visit tracker. When the visit began, so we can work out how long it lasted.
`_ga`	Up to 400 days	Cookie set by Google Analytics on gohvio.io. Tells one browser from another.
`_ga_PSJ6495CL0`	Up to 400 days	Cookie set by Google Analytics on gohvio.io. Keeps track of the visit for our Analytics property.
`hubspotutk`	6 months	Cookie set by HubSpot on gohvio.io. HubSpot's visitor identity, used to connect a form you submit to your earlier visits.
`__hstc`	6 months	Cookie set by HubSpot on gohvio.io. HubSpot's main visit tracking cookie.
`__hssc`	30 minutes	Cookie set by HubSpot on gohvio.io. Counts pages viewed in the current visit.
`__hssrc`	Until you close the browser	Cookie set by HubSpot on gohvio.io. Notes whether the browser has restarted.

The durations for Google Analytics and HubSpot cookies are those vendors' published defaults.

3.4 What does not wait for your choice

Google Analytics' tag loads on every page, before you answer the banner and whatever you answer. Until you accept, it stores nothing in your browser, but it does send Google a cookieless signal that a page was viewed.
Cloudflare Web Analytics. Cloudflare hosts gohvio.io and adds this measurement at its own edge, not through our code, so no file we write contains it. It records the page, where you came from, your country, your IP address, your browser, operating system and device type, and how fast the page loaded. We measured no cookie from it. Cloudflare describes it as cookieless; we have not verified that ourselves. Switching it off is a setting in Cloudflare's dashboard, and we have chosen to keep it and tell you.
The write-back pilot form. On the write-back pilot page, a HubSpot form loads only when you press the button asking for it. Pressing it brings in Google reCAPTCHA and sets a __cf_bm cookie on .hsforms.net and on .hsforms.com, which HubSpot's network provider uses for about 30 minutes to tell a person from a bot.
Fonts are served from gohvio.io, so loading them involves no one else.
The Fireside pages. The registration, cancel and recording pages ask our database provider, Supabase, for the event's public details (title, time, whether registration is open, the questions) as the page loads, before you answer the banner and whatever you answer. It sets no cookie and stores nothing in your browser. Like any request, it shows Supabase your IP address and browser. Nothing you type is sent until you press the button.
Fireside emails contain a counting image and counted links, described in the Privacy Policy. They set no cookie and store nothing on your device.

Nothing else on the site runs before you choose.

4. What we do not use

We do not run ads, so there are no advertising or retargeting cookies, no ad-network pixels, and no audiences built to sell. Nothing collected by anything on this page is sold, rented or traded, and none of it follows you to another website.

5. Manage cookie preferences

The banner on your first visit offers two answers:

Essential only. The items in 3.1 and 3.2, and nothing else. Google Analytics, HubSpot and our visit tracker store nothing and record nothing beyond what 3.4 describes.
Accept all. Those, plus everything in 3.3.

You can change your settings at any time with the button in the bottom left corner of the site, or the Consent preferences link in the footer of every page. The floating button is not shown on the Fireside pages; the footer link is on every page. Either one reopens the cookie choice so you can update it or withdraw your consent straight away. Neither answer affects what 3.4 describes.

Here is exactly what withdrawing does, including its limits:

It deletes the cookies it can reach. Google Analytics' and HubSpot's cookies in 3.3 are all set on gohvio.io, so we remove them the moment you withdraw, and again on each page load while consent is withdrawn. The __cf_bm cookies on HubSpot's own domains are out of our reach; the browser controls below can remove them.
Two stop at once, one on your next page load. Our visit tracker stops immediately, in this tab and every other tab you have open on this site. Its two session storage keys stay until you close the tab, but nothing more is sent. Google Analytics stops storing at once, in every tab. HubSpot's script is already running in the page, and no site can unload a script the browser has run, so it stops when you next load a page. Reloading applies your choice in full.
It does not delete what was already collected. You can ask us to, using the rights in our Privacy Policy.

Your browser can also block or delete cookies, for this site or for every site. These controls do not depend on us keeping our word. Blocking necessary items may stop parts of the site working, and browser controls will not stop the measurement in 3.4, which needs nothing stored in your browser.

For any other browser, see its own help pages.

6. Do Not Track and Global Privacy Control

If your browser sends Do Not Track or Global Privacy Control, our own visit tracker does nothing at all, even if you accept analytics. Google Analytics and HubSpot's script do not read these signals; your choice on the banner is what governs them. Cloudflare's measurement does not read them either.

7. When this page changes

If something new starts measuring this site, or something here stops, this page changes and so does the date at the top. Two checks we wrote back that up, and we run them before a release. One opens every page of the build in a real browser with no consent stored and lists every third party it contacts. The other fetches pages of the live site with a real browser's headers and compares their scripts with the ones we built, which is how anything our host adds at its edge gets caught. Their limits: a person runs them, not an automatic gate, and the first cannot see anything added after our build, which is why the second exists.

Recent changes:

5 October 2026. Our own site analytics is now the visit tracker in 3.3, loaded from app.gohvio.io only after you accept. It respects Do Not Track and Global Privacy Control, and it no longer works out a device code from your browser details. Its storage keys are now gohvio_t_session_id and gohvio_t_session_start.
26 September 2026. Fonts moved from Google to gohvio.io, so Google no longer sees your IP address when a page loads them.
25 September 2026. HubSpot's tracking script and our own analytics stopped running before the banner was answered. Withdrawing consent started deleting Google Analytics and HubSpot cookies on gohvio.io.

8. Contact

Questions about this policy, or about anything we store: [email protected].