Cookies & external services
What your browser uses when you browse or sign in. Updated 16 October 2026.
Who operates this website?
Oveloworld Ltd, company number 17523254, registered in England and Wales. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For questions, contact hello@oveloworld.com.
Sign-in cookies
The application uses these first-party cookies to provide the account session you request:
| Cookie | Purpose | Application lifetime |
|---|---|---|
__Host-ovelo-id | Firebase identity token used by our server to recognise your session. | Up to one hour per token; renewed while signed in. |
__Host-ovelo-refresh | Allows the server to refresh your sign-in session. | Session cookie, without a persistent expiry set by the application. |
Both are Secure, HttpOnly and SameSite=Lax. Necessary sign-in cookies do not require an optional-marketing consent choice. Browser session restoration can retain session cookies after reopening; closing a window is not a reliable sign-out method. Use Sign out on shared devices. Browser settings can block/delete cookies, but blocking necessary cookies can prevent sign-in.
Hosting and external connections
Our hosting/security providers may set operational security cookies or process network information. The member interface requests fonts from Google Fonts, which connects your browser to Google and can disclose technical request information such as your IP address. A font request is not by itself an advertising cookie. External provider links have their own privacy and cookie practices once opened. Contact forms open your email application so you can review and send the message.
Analytics and advertising
We have not added advertising pixels or audience analytics to this release. We do not claim that no infrastructure-level cookies or logs exist. Before introducing optional tracking, we will explain its purposes and apply the consent or exception conditions that legally apply. You can browse public pages without accepting advertising tracking. Device storage, similar technologies and email tracking are assessed by their purpose, not just whether they are called cookies.
See the privacy notice for suppliers, technical data and rights.