1. Our approach
Chatrevia uses cookies and browser storage only to run the service and remember your choices. We do not use advertising cookies. On chatrevia.com we use Google Analytics to count visits and see which pages are used, and PostHog to see how the website and the team app are used. The messenger sets no cookies on our customers’ websites; it uses the browser’s local and session storage instead, and visitor context is synchronized only after the visitor allows tracking and sends a chat message. A bounded browsing buffer can stay locally in the tab before then.
2. Cookies on chatrevia.com and in the team app
| Cookie | Purpose | Duration |
|---|---|---|
| leadpilot.session_token | Keeps you signed in. Sent as __Secure-leadpilot.session_token over HTTPS. | 7 days, renewed while you are active |
| lp-org | Remembers which workspace you are working in. | Browser session |
| chatrevia-brand-theme | Remembers the colour theme you selected. | 1 year |
| leadpilot.two_factor | Holds a two-step sign-in in progress until you enter your code. | 10 minutes |
| lp-oauth-<provider> | Protects the sign-in step when you connect an integration. | 10 minutes |
| lp-support, lp-platform | Chatrevia staff only: support sessions and security verification. | 60 minutes; up to 24 hours |
Checkout and the billing portal are hosted by Stripe on its own site, where Stripe sets its own cookies under its privacy policy.
3. Analytics on chatrevia.com
Google Analytics runs on chatrevia.com only: not in the messenger, on help centers, on workspace addresses or on customers’ websites. Google signals and ad personalization are turned off. In the European Economic Area, the United Kingdom and Switzerland, and in browsers that send a Global Privacy Control signal, it sets no cookies and sends Google only cookieless measurements. Elsewhere it sets these cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics: distinguishes visitors with a random identifier. | 2 years |
| _ga_<id> | Google Analytics: keeps the state of the current visit. | 2 years |
Google processes this information under its own privacy policy. You can also install Google’s opt-out browser add-on.
4. Product analytics with PostHog
PostHog runs on chatrevia.com and in the team app, including workspace addresses: not in the messenger, on help centers or on customers’ websites. It records the pages you view and the buttons you click, without the text on the page, and links without their query strings. Signed-in users are identified only by their account and workspace identifiers, never by name or email address. Session replay is off. Staff support sessions in a workspace are not recorded.
In the European Economic Area, the United Kingdom and Switzerland, and in browsers that send a Global Privacy Control signal, PostHog sets no cookies or browser storage and counts visits with a privacy-preserving hash instead. Elsewhere it stores:
| Entry | Purpose | Duration |
|---|---|---|
| ph_<project key>_posthog (cookie and local storage) | PostHog: distinguishes visitors with a random identifier and keeps the state of the current visit. Other entries starting with ph_ hold its settings. | Cookie 1 year; local storage until cleared |
PostHog, Inc. processes this information in the United States under its own privacy policy.
5. Storage used by the messenger
The messenger on customers’ websites, and on chatrevia.com, stores these entries in the visitor’s browser. <key> identifies the website’s messenger. Nothing that recognizes a returning visitor is stored before the visitor allows tracking.
| Entry | Purpose | Kept |
|---|---|---|
| senorita-consent-<key> | Your tracking choice, the version of the prompt you answered and when, so you are not asked again. Stored whether you allow or decline. | 12 months, or until the prompt changes |
| senorita-chat-<key>-… | The current chat session and messenger settings. | Until the tab closes |
| senorita-greet-<rule> (session storage) | Avoids repeating a greeting during this visit. | Until the tab closes |
| senorita-threads-<key>-… | Lets you return to up to 20 recent conversations. | 30 days |
| senorita-news-seen-<key>, senorita-chat-sound, senorita-visitor-alerts-invite | Which news you have seen, and your sound and notification preferences. | Until cleared |
| Only after you allow tracking: lp-visitor-<key>, senorita-tracking-<key>, senorita-returning-<key>, senorita-greet-<rule> | A random visitor identifier, your choice as seen by the website’s page, recognition of a returning visitor for greeting rules, and greetings shown only once. | Until you switch tracking off or clear storage |
6. Storage used by the team app
Signed-in team members’ browsers keep a few preferences in local storage: the colour theme, which inbox items have been seen, which product guides have been viewed, the state of the setup checklist and whether notification prompts were dismissed. Guide progress is also saved to the team member’s account so it follows them between devices; the rest never leaves the browser.
7. Visitor tracking and session replay
When the messenger opens, it explains who decides how visitor data is used and links to their privacy notice. Visitors choose “Allow” or “Decline”, shown with equal weight. Only after a visitor allows it does the messenger record the pages viewed on that website, campaign (UTM) parameters, the referring website’s address, a visitor identifier, a device signature used to recognize the same person across visits, and a session replay. Replays mask all text and form inputs, including hidden fields, remove web address parameters, block media and frames, and stop after 10 minutes. Declining turns all of this off, and the chat works the same.
Browsers that send a Global Privacy Control signal are treated as declining, and the prompt is not shown.
To change your choice, open “Privacy choices” in the messenger menu. Switching tracking off stops recording, clears the entries above and deletes the pages viewed, replay, visitor identifier and device signature collected in that conversation.
8. Managing cookies and storage
You can view and delete cookies and site storage in your browser settings. Blocking the session cookie prevents signing in, and clearing messenger storage ends your ability to resume earlier conversations from that browser.
9. Changes and contact
We update this page when we add or change a cookie or storage entry. Questions: support@chatrevia.com. See also our Privacy notice.