Cookies

Convoy uses three kinds of cookies.

  • Strictly necessary cookies (below) are always on. The law doesn't require consent for them, because the service can't work without them.
  • Advertising cookies are set by Google, and only on pages that show ads (events on the Free plan, and your events list). In the UK, EEA and Switzerland, they're only used if you agree in Google's consent message.
  • Ad measurement cookies are only set if you arrive from one of our Google ads and say yes when we ask. They let us count which ads lead to sign-ups, and are never used to personalise ads.

We use no analytics cookies. Change your ad choices any time at Your privacy choices.

Strictly necessary

CookiePurposeLasts
__Host-convoy.authKeeps you signed inSession, or 14 days if you choose "keep me signed in"
__Host-convoy.xsrfProtects forms against cross-site request forgerySession
cv_g_…Lets a guest edit their own entry in one event, without an account. Only sent to that event's pages.90 days
cv_a_…Remembers that this browser opened an event's invite link, so the event page will open. Only sent to that event's pages.90 days
Identity.TwoFactorUserId, Identity.TwoFactorRememberMeTwo-step verification sign-in, and "don't ask again on this device"Session / 14 days
cv_themeRemembers the light or dark theme you picked with the header switch. Only set if you use it.1 year
cv_ads_optoutRemembers that you opted out of ads ("Do Not Sell or Share")1 year
cv_measureRemembers your answer about ad measurement, so we don't ask again6 months

Advertising (Free-plan pages only)

Set byPurposeLasts
Google (e.g. __gads, __gpi, IDE)Showing and measuring ads, limiting how often you see the same ad, fraud prevention, and (with consent) personalisationUp to 13 months
Google consent message (FCCDCF, FCNEC)Remembering your consent choicesUp to 13 months

Ad measurement (only if you allow it)

CookiePurposeLasts
_gcl_aw, _gcl_au (set by Google's tag on Convoy's own domain)Remember that you arrived from one of our Google ads, so a sign-up can be counted for that ad90 days
cv_signup_convSet when you confirm your email address, so the next page can report one sign-up to GoogleUp to 1 day, removed once used

Withdraw at any time at Your privacy choices, and these cookies are removed.

Google's full list: business.safety.google/adscookies.

When you pay, you're sent to Stripe's own site, which sets its own cookies under Stripe's cookie policy.