1. Who we are

Lavin Reply is operated by AllSaferAI OÜ, registry code 17591726, Tartu mnt 67/1-13b, Tallinn 10115, Estonia. AllSaferAI OÜ is the data controller for the cookies described here.

For anything in this policy, write to sarwar@allsaferai.com. How we handle personal data more generally is set out in our Privacy Policy.

2. What cookies are

A cookie is a small text file a website asks your browser to store, so that it can recognise your browser on a later request. We also use technologies that work the same way but store data elsewhere in the browser — local storage, and small tracking scripts known as pixels. Everything in this policy applies to all of them, and we call them all cookies below.

Cookies set by us are called first-party cookies. Cookies set by a company whose script runs on our pages — Google, Meta, TikTok, LinkedIn — are third-party cookies, and that company decides for itself what it does with them under its own privacy policy.

4. Strictly necessary cookies

These are always active. They carry no advertising identifiers and are not used to profile you.

Strictly necessary — set without consent, because the service cannot run without them.
NameSet byPurposeKept for
sb-<project>-auth-tokenSupabase (our authentication provider)Keeps you signed in and identifies your session on every request. Without it you would be signed out on each page load.Until you sign out, or up to 1 year
active_account_idLavin ReplyRemembers which account an administrator is currently working in, so the right data is shown.Until the browser is closed
themeLavin ReplyRemembers whether you chose the light or the dark appearance, so the page does not flash the wrong one.1 year
allsafer_cookie_consent (browser local storage, not a cookie)Lavin ReplyRecords the choice you made on the cookie banner, so we do not ask again on every page and so we can prove what you consented to.6 months, then we ask again

5. Analytics cookies

These tell us how many people visit and which pages they read, so we can decide what to improve. They are optional and are set only if you switch Analytics on.

We run Google Analytics 4 with Google Consent Mode v2. Until you consent, the Google tag is not loaded at all, and the consent signal it starts from denies analytics and advertising storage.

Analytics — set only after you switch Analytics on.
NameSet byPurposeKept for
_gaGoogle Analytics 4 (Google Ireland Limited)Distinguishes one visitor from another so visits can be counted.2 years
_ga_<container id>Google Analytics 4 (Google Ireland Limited)Keeps the state of the current visit for the property.2 years
_gidGoogle Analytics 4 (Google Ireland Limited)Distinguishes visitors for short-term reporting.24 hours
_gatGoogle Analytics 4 (Google Ireland Limited)Limits how often data is sent, to reduce load.1 minute

6. Marketing cookies

These measure whether an advert brought you here and let us show ads to people who have visited before. They are optional and are set only if you switch Marketing on.

Marketing — set only after you switch Marketing on.
NameSet byPurposeKept for
_fbpMeta Pixel (Meta Platforms Ireland Limited)Identifies a browser so that visits arriving from a Facebook or Instagram advert can be measured and audiences can be built.3 months
_fbcMeta Pixel (Meta Platforms Ireland Limited)Stores the advert click identifier from the link you arrived on, to attribute a sign-up to a campaign.3 months
_ttpTikTok Pixel (TikTok Technology Limited)Measures visits and sign-ups that came from a TikTok advert and supports ad targeting.13 months
li_sugr, bcookie, bscookie, lidc, li_gc, UserMatchHistory, AnalyticsSyncHistoryLinkedIn Insight Tag (LinkedIn Ireland Unlimited Company)Recognises a browser across LinkedIn advertising, measures campaign results and supports audience matching.Between 1 day and 2 years, depending on the cookie

A tool appears in your browser only where we have configured it for this site. Where a tool is not configured, none of its code is sent to you at all, whatever you choose here.

8. International transfers

Google, Meta, TikTok and LinkedIn are reached through their European entities, but each may transfer data to servers outside the European Economic Area, including the United States.

  • Where the recipient is certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision of 10 July 2023.
  • Otherwise, transfers rely on the European Commission's Standard Contractual Clauses, together with the additional technical and organisational measures agreed with that provider.
  • You can ask us for a copy of the safeguards that apply to a particular transfer by writing to the address in section 1.
  • These transfers happen only for the optional categories you switch on. If you consent to neither, no data reaches these providers through this site.

9. Your rights and how to complain

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent at any time. To exercise any of these, write to sarwar@allsaferai.com.

If you are not satisfied with our answer, you can complain to the Estonian Data Protection Inspectorate:

  • Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
  • Tatari 39, 10134 Tallinn, Estonia
  • info@aki.ee

You may also complain to the supervisory authority of the EU country where you live or work.

10. Changes to this policy

If we add a cookie, add a provider, or change what a category covers, we update this page and raise the version of the consent record. A raised version invalidates the answer stored in your browser, so the banner asks you again rather than treating your old answer as covering something you were never told about.

The date at the top of this page is when it last changed. Material changes are announced on the site before they take effect.

Cookie Policy — Lavin Reply