Cookie Policy | Quivani
Quivani's cookie policy: which cookies we use, why, retention periods, and how to manage your consent. Aligned with our Privacy Policy and GDPR.
Cookie Policy — Quivani
Version: v3.0.1
Date: 2 May 2026
Entity: Quivani Endevio Ltd. (C 107527)
Applies to: quivani.com and all subdomains
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect usage data. Some cookies are strictly necessary for the site to function; others are used for analytics and performance tracking and require your explicit consent under GDPR and the ePrivacy Directive.
2. How We Use Cookies
We use cookies to:
- Ensure the website functions correctly
- Understand how visitors interact with our pages
- Improve user experience and site performance
- Record and replay anonymous session data for UX analysis
We do not use cookies for advertising targeting or third-party data sharing.
3. Cookie Categories
3.1 Strictly Necessary
These cookies are essential for the website to operate. They cannot be disabled.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm |
Cloudflare | Bot management and security | 30 minutes |
_cfuvid |
Cloudflare | Rate limiting and session management | Session |
hubspotutk |
HubSpot | Tracks a visitor's identity for form submissions | 13 months |
__hssrc |
HubSpot | Session detection (browser restart detection) | Session |
__hssc |
HubSpot | Session tracking for analytics | 30 minutes |
3.2 Analytics & Performance
These cookies are only placed if you consent to analytics tracking (analytics_storage).
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes unique users | 2 years |
_ga_* |
Google Analytics 4 | Maintains session state | 2 years |
_gcl_au |
Conversion measurement | 90 days | |
mf_user |
Mouseflow (Mouseflow A/S, Denmark) | Identifies returning visitors for session replay and heatmap analysis | 1 year |
mf_session |
Mouseflow (Mouseflow A/S, Denmark) | Tracks the current session for recording | Session |
_clck |
Microsoft Clarity (Decommissioning — see note below) | Identifies user for behaviour analytics | 1 year |
_clsk |
Microsoft Clarity (Decommissioning — see note below) | Connects page views within a single session | 1 day |
Note on Microsoft Clarity: Microsoft Clarity is being decommissioned from this website. Data collection via Clarity cookies will cease within the next 3 months. The tags remain technically active during this transition period.
3.3 Functional
These cookies support enhanced functionality and personalisation.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
__hstc |
HubSpot | Stores visitor identity and history for CRM continuity | 13 months |
messagesUtk |
HubSpot | Identifies returning visitors using HubSpot chat | 13 months |
4. Third-Party Processors
| Processor | Country | Data Transfer Basis | Service |
|---|---|---|---|
| Google LLC | USA | Standard Contractual Clauses (SCCs) | Analytics (GA4) |
| HubSpot Inc. | USA | Standard Contractual Clauses (SCCs) | CRM, forms, chat |
| Cloudflare Inc. | USA | Standard Contractual Clauses (SCCs) | Security, CDN |
| Mouseflow A/S | Denmark (EU) | No transfer — EU-based | Session replay, heatmaps |
| Microsoft Corporation | USA | Standard Contractual Clauses (SCCs) | Clarity behaviour analytics (decommissioning) |
5. Your Consent Choices
When you first visit this website, you will be asked to accept or decline cookies via our consent banner (powered by HubSpot). You may withdraw or update your consent at any time by:
- Clicking the "Cookie Settings" link in the footer of any page
- Clearing your browser cookies and reloading the page to re-trigger the consent prompt
Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
6. Legal Basis
Our use of analytics cookies is based on your explicit consent (GDPR Article 6(1)(a)). Strictly necessary cookies are placed on the basis of our legitimate interest in operating a functional website (GDPR Article 6(1)(f)).
7. Data Retention
Session recording data collected via Mouseflow is retained for a maximum of 12 months, after which it is automatically deleted. Google Analytics data is retained for 14 months. You may request deletion of your data at any time by contacting us.
8. Contact
For any queries regarding our use of cookies or to exercise your data rights:
Quivani Endevio Ltd. (C 107527)
Email: privacy@quivani.com
Postal:
Level 2, The Brewhouse
Mdina Road
Central Business District, Zone 2
Birkirkara CBD 2010
Malta
9. Changes to This Policy
This policy was last updated on 2 May 2026 (v3.0.1). We will notify users of material changes via the website consent banner.
Previous version: v3.0.0 — entity recorded as "Quivani Ltd" and postal address was a placeholder. v3.0.1 corrects the legal entity to "Quivani Endevio Ltd. (C 107527)" to match the Privacy Policy and inserts the registered postal address. v2 did not include Mouseflow. Clarity status updated to Decommissioning.