Cookie Policy

COOKIE POLICY AxiosCore Last updated: 31 October 2026 Effective from: 31 October 2026 ================================================================ 1. INTRODUCTION ================================================================ This Cookie Policy explains how AxiosCore ("AxiosCore", "we", "us", "our") uses cookies and similar technologies on the AxiosCore platform available at https://axioscore.im and on Studio pages hosted on the Platform (the "Platform"). It should be read together with our Privacy Policy (https://axioscore.im/privacy) and our Terms and Conditions (https://axioscore.im/terms). Legal entity: Doncho Ivanov t/a DEVer Studio Registered address: 17A Elm Drive. Onchan, Isle of Man Contact email: support@dever.im ================================================================ 2. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES ================================================================ Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to keep you signed in, to remember your preferences and to provide information to the website operator. We also use "similar technologies", which include: - Local storage — data stored by your browser on your device that persists until it is deleted. - Session storage — data stored by your browser that is cleared when you close the browser tab. - Service worker caches — storage used by our progressive web app to keep a copy of the application shell so the Platform loads quickly and works reliably. References to "cookies" in this policy include these similar technologies, except where stated otherwise. ================================================================ 3. HOW WE USE COOKIES AND YOUR CHOICES ================================================================ We group cookies and similar technologies into three categories: (a) Strictly necessary — required for the Platform to function, for example to sign you in, to keep your session secure and to remember your cookie choices. These cannot be switched off, because the Platform cannot work without them. (b) Functional — used to provide optional features and preferences, for example to remember a support or administration mode. These are only used where the feature applies to you. (c) Analytics and marketing — used to measure how the Platform is used or to support advertising. Current position on analytics and marketing: we do NOT currently set any analytics or marketing cookies. Non-essential cookies and scripts on the Platform are loaded only after you have given your consent, through the cookie banner. If we introduce analytics or marketing cookies in future, they will not load before you consent, and this Cookie Policy will be updated with their names, purposes and durations. Your consent choices are recorded in a first-party cookie (see section 4) and can be changed at any time. You can also withdraw your consent at any time by re-opening the cookie banner and updating your choices, or by deleting cookies in your browser. ================================================================ 4. STRICTLY NECESSARY COOKIES ================================================================ Cookie name: sb-<project-reference>-auth-token (and sb-<project-reference>-auth-token.0, .1, ... where the value is split across several cookies) Provider: AxiosCore, using Supabase Auth Purpose: Stores your authentication session so that you stay signed in and so that the Platform can verify your identity and access rights on each request. Duration: Session, refreshed while you use the Platform; cleared on sign out or when it expires. Type: First-party, HTTP-only, essential. Cookie name: axioscore_consent Provider: AxiosCore Purpose: Records your cookie consent choices (which categories you have accepted or rejected), the version of the consent notice you responded to, and when you made your choice, so that we do not ask you again on every visit and so that we can prove your choice. Duration: Approximately 6 months, then expires and you will be asked again. Stored values: essential = always enabled; analytics = your choice; marketing = your choice; version number; timestamp. Type: First-party, essential. Cookie name: sumup_oauth_state Provider: AxiosCore Purpose: Security and anti-forgery protection during the process of connecting a Studio's own payment account. Contains a signed, short-lived value used to verify that the connection request genuinely came from the Studio that started it. Duration: 15 minutes, then expires; also cleared as soon as the connection process completes. Type: First-party, HTTP-only, essential, only set while a Studio is connecting a payment account. ================================================================ 5. FUNCTIONAL COOKIES AND SIMILAR STORAGE ================================================================ Cookie name: impersonating_studio_id Provider: AxiosCore Purpose: Allows an authorised platform administrator to open a Studio's dashboard in a strictly limited, read-only support mode, so that support staff can see what the Studio sees without being able to change the Studio's data. This cookie is only set for platform administrators who are already signed in; it is never set for Studio owners or for End Customers. Duration: 24 hours, then expires. Type: First-party, functional. Local storage item: impersonating_studio_id Provider: AxiosCore Purpose: Stores the same limited support-mode state described above in the browser, so that the support view stays consistent while an administrator navigates between pages. Duration: Until it is cleared, or until the support session ends. Session storage item: pending_paddle_signup Provider: AxiosCore Purpose: Temporarily holds the details you entered during the signup process (such as your email address, business name, selected plan and a single-use signup reference) while you move from the signup page to the payment page, so that you do not have to re-enter them. Duration: Until you close the browser tab, or until the signup process completes. Session storage item: ac_push_perm_asked_v1 Provider: AxiosCore Purpose: Records that we have already asked you whether you want to enable browser push notifications, so that we do not ask you repeatedly during the same browsing session. Duration: Until you close the browser tab. Session storage item: ac_current_studio_id Provider: AxiosCore Purpose: Temporarily caches the identifier of the Studio account that is currently signed in, so that the Platform can route real-time booking updates and in-browser notifications to the right account during your session. It contains only a Studio account identifier, not your personal data. Duration: Until you close the browser tab, or until it is cleared on sign out. ================================================================ 6. ANALYTICS AND MARKETING COOKIES ================================================================ We do not currently use any analytics or marketing cookies, and we do not carry out advertising or cross-context behavioural tracking. The Platform includes the technical capability to load analytics and marketing scripts only after consent is given. If we enable any such cookie or script in future, we will list it in this section with its name, provider, purpose and duration, and it will not load before you consent. ================================================================ 7. SERVICE WORKER CACHE (PROGRESSIVE WEB APP) ================================================================ The Platform is a progressive web app. A service worker runs in your browser to keep a copy of the application shell (the interface framework and static files) so that pages load quickly and remain usable if your connection drops briefly. This cache does not store your personal data, your bookings or your payment details; it stores application files only. It is cleared when you clear your browser storage, and it is not used to track you. If you enable browser push notifications, we store a push subscription endpoint and associated technical keys, together with your browser's user-agent string, so that notifications can be delivered to your device. This is described in our Privacy Policy, not in this Cookie Policy, and you can withdraw your consent at any time in your browser settings or in the Platform. ================================================================ 8. THIRD-PARTY EMBEDDED CONTENT ================================================================ Some Studio pages embed content provided by third parties. For example, a Studio may display a location map provided by Google Maps, or a video hosted on another platform. When this embedded content loads, the third-party provider may receive your IP address, information about your browser, and the page you are viewing, and may set its own cookies. These third parties set cookies under their own policies, and we do not control them. Where we rely on a consent mechanism for such embeds, the embed will not load before you give consent. To understand what data these providers collect and how to control it, please review the privacy and cookie notices of the relevant provider (for example, Google's privacy policy and cookie notice). ================================================================ 9. HOW TO MANAGE AND DELETE COOKIES ================================================================ You can control cookies in several ways: - Through the Platform: use the cookie banner to change or withdraw your consent choices at any time. - Through your browser: all modern browsers let you view, block and delete cookies and clear local and session storage. Browser help pages explain how (look for settings relating to privacy, cookies and site data). - Through your device: mobile operating systems also provide controls for app and browser data. Please note that if you block or delete strictly necessary cookies, the Platform will not work correctly: you will not be able to sign in, to manage your bookings, or to keep your cookie choices. Blocking functional storage may disable support mode and the "do not ask again" behaviour for push notification prompts. ================================================================ 10. CHANGES TO THIS COOKIE POLICY ================================================================ We may update this Cookie Policy from time to time, for example if we add or remove a cookie or a third-party service. When we make material changes, we will update the "Last updated" date above, and where appropriate we will ask you to review your consent choices again. ================================================================ 11. CONTACT ================================================================ For any question about this Cookie Policy: Email: support@dever.im Post: Doncho Ivanov t/a DEVer Studio, 17A Elm Drive, Onchan, Isle of Man, IM3 4EH ================================================================ END OF COOKIE POLICY ================================================================