Cookie Policy

Last updated: March 6, 2026

This Cookie Policy explains how Voice2Evolve UG (haftungsbeschränkt) (“Voice2Evolve”, “we”, “us”) uses cookies and similar technologies on our website and application.

---

1. What are cookies?

Cookies are small text files stored on your device by your browser.
Some cookies are strictly necessary to make a website or application work securely and correctly.

---

2. Our approach to cookies

Voice2Evolve uses only essential cookies that are required for:

• authentication and session management,
• security and abuse prevention,
• storing basic preferences such as language.

We do not use:

• advertising cookies,
• marketing cookies,
• cross-site tracking cookies,
• cookies for behavioral profiling.

---

3. Cookies used on our marketing website (voice2evolve.com)

Our marketing website uses only minimal, essential cookies.

Language preference

• Cookie name: NEXT_LOCALE
• Purpose: Stores your selected language (e.g. English, German, French) to keep the site consistent across visits.
• Typical lifetime: Up to 1 year
• Type: First-party, essential

No analytics or tracking cookies are used on the marketing website. We use a privacy-friendly, cookieless analytics service (Rybbit) to measure aggregate usage of our website. The service does not use cookies and does not perform cross-site behavioural profiling.

---

4. Cookies used in the application (app.voice2evolve.com)

The Voice2Evolve application uses essential cookies required for secure login and session handling.

Authentication & session management

These cookies are typically set by our authentication provider and are required to keep you signed in:

• sb-access-token

  • Purpose: Confirms that you are logged in
  • Type: Essential, HTTP-only
  • Typical lifetime: Short-lived (for security)

• sb-refresh-token

  • Purpose: Refreshes your session without requiring repeated logins
  • Type: Essential, HTTP-only
  • Typical lifetime: Limited duration

• sb-refresh-backoff-until

  • Purpose: Temporarily prevents repeated token-refresh requests when the server has signalled rate limiting; protects both the user's session and backend stability
  • Type: Essential, HTTP-only
  • Typical lifetime: Very short-lived (seconds to minutes, cleared automatically once the backoff period expires)

Language preference

• NEXT_LOCALE
  • Purpose: Stores your language preference
  • Type: Essential

Without these cookies, login and core application functionality would not work.

Product analytics

We use Rybbit to measure aggregate, cookieless usage statistics within the application to understand feature adoption and improve the product.

• No cookies are used.
• No individual user profiles are created.
• Analytics are restricted on pages containing personal session data or account information.

Pages fully excluded from analytics (no tracking at all):

Excluded area	Reason
Session preparation and post-session processing areas	User-specific context and personal performance data
Individual analysis result views	Personal scoring and feedback
Account and billing management areas	Personal profile and payment-related data
Authentication and access-control flows	Security-sensitive credentials and tokens
Internal and tenant administration interfaces	Business-sensitive configuration and operations

Pages where URL is anonymised (page visit counted; URL path is hidden before transmission):

Area	Reason for anonymisation
Active voice session views	Real-time audio and transcript context; visits counted for funnel metrics, path not stored
Session setup and planning flows	Funnel measurement with URL path anonymised
Invitation flows	Visits counted while invitation tokens and identifiers are anonymised

Pages where analytics are active in full (aggregate product metrics): lower-sensitivity product surfaces such as dashboard overviews, login entry, pricing, and checkout.

---

5. Error monitoring and security tools

To improve application stability and security, we use Sentry for error reporting and session diagnostics.

Error reporting: Sentry captures technical error details (stack traces, browser metadata, page URLs) to help us diagnose and fix bugs. Sensitive data is removed before transmission: cookies, authorization headers, session tokens, localStorage, and sessionStorage are all stripped from error reports.

Session Replay: To aid debugging of hard-to-reproduce issues, Sentry may record a replay of user interactions at the time of an error. A small sample (up to 5%) of normal sessions is also recorded for quality monitoring. Session Replay is configured with:

• All text masked — form inputs and displayed text are replaced with placeholder blocks before recording.
• All media blocked — images, video, and audio are not captured.

Session Replay does not use cookies and does not share data for advertising or tracking purposes.

---

5a. Third-party analytics services

Rybbit Analytics

Purpose	Website and product usage analytics (marketing site + selected app pages — see §4)
Data processed	IP address (processed server-side for country/region derivation), browser metadata, page context (full URL only on lower-sensitivity areas; anonymised path on selected flows), timestamps
Cookies used	None
Cross-site tracking	No
Behavioural profiling	No
Provider	Rybbit (app.rybbit.io)

Rybbit collects data without cookies, using server-side processing to derive aggregate, non-identifiable statistics. No individual user profiles are created. For more information, see Rybbit's privacy documentation.

---

6. Legal basis (GDPR)

Where the EU General Data Protection Regulation (GDPR) applies, essential cookies are processed based on:

• Legitimate interests (Art. 6(1)(f) GDPR)
  for providing a secure, stable, and functional service requested by the user.

Because we use only essential cookies, consent banners are generally not required.
If optional cookies are introduced in the future, consent will be requested where legally required.

---

7. Managing cookies

You can delete or block cookies at any time through your browser settings.

Please note that blocking essential cookies may:

• prevent login,
• break session handling,
• limit core functionality of the application.

---

8. Updates to this Cookie Policy

We may update this Cookie Policy to reflect legal, technical, or operational changes.
The current version is always available on our website.

---

9. Contact

For questions about our cookie usage, contact:

Voice2Evolve UG (haftungsbeschränkt)
Email: help@voice2evolve.com