Cookies and browser storage
Last updated 30 October 2026
This notice explains the cookies and other browser storage the Intaviu website and its web interview room use, what each one is for and how long it lasts. It covers the website and web room only; the desktop app keeps its settings on your computer.
The short version
- Intaviu sets cookies of its own for your language and location, for your cookie choices, and one only after the security check on an invitation page. None of Intaviu's own cookies is used for advertising.
- Signing in, your display preferences and the web room's voice files are kept in your browser's storage, not in cookies.
- We measure how the site is used with our own first-party events, sent only to Intaviu, and with Cloudflare Web Analytics, which counts page visits and how fast pages load without cookies, without storing anything in your browser and without following you across sites.
- Intaviu shows no ads on its own pages. With your consent, we use Google Analytics, and Google's advertising features on that data so Google can show you Intaviu's ads on other sites and measure them. A banner asks first, with Accept All, Reject Non-Essential and Manage Settings. Nothing is loaded from Google and no Google cookie is set unless you accept, and you can change your mind at any time in Cookie Settings, at the bottom of every page.
- Some forms load one service from another company: Cloudflare Turnstile, a check that a person, not an automated program, is using the form. It is used only for that, never for advertising or analytics.
- Apart from Google Analytics and advertising, everything we set is needed for the site to work, remembers a choice you made, or is a first-party event used only by Intaviu, which you can have switched off (below). If your browser sends Do Not Track or Global Privacy Control, we treat it as Reject Non-Essential and don't show the banner.
Cookies Intaviu sets
| Name | What it does | How long |
|---|---|---|
__Secure-intaviu.session_token | Keeps you signed in on this browser. It holds a random session key, signed by Intaviu, that page scripts can't read (it is HttpOnly), and it is sent only to the Intaviu website over HTTPS. Logging out, signing out everywhere or changing your password ends it. | 30 days, renewed while you use Intaviu |
iv_locale | The language you chose in Select location and language. | 1 year |
iv_country | The location you chose there or in your account. | 1 year |
iv_geo | The country we found from your internet address the first time you visited, used as your location until you choose one. Only the two-letter country code is stored. | 7 days, or 1 day when the country couldn't be found |
iv_consent | Your answer to the cookie banner: analytics and advertising, analytics only, or neither. It holds nothing else. | 6 months, then we ask again |
iv_hp | Set only on an invitation page that asked you to confirm you're human (this happens after several interview codes that don't exist were tried from your network). It shows our server that your browser passed the check, for that one invitation, and contains nothing about you. | 15 minutes |
These are first-party cookies: only the Intaviu website can read them. The web room shares the language and location cookies, so it uses the language you chose on the website.
Google Analytics and advertising (only if you accept)
The banner and Cookie Settings ask about two things, both off until you turn them on. Accept All turns on both; Reject Non-Essential turns on neither.
- Analytics: the website loads Google Analytics 4 from www.googletagmanager.com, which counts visits and the pages people use so we can see how Intaviu is used and make it better.
- Advertising: Google may use that Google Analytics data, including Google signals, to show you Intaviu's ads on other sites and apps, to choose which ones are relevant to you, and to measure how they work. Advertising uses the analytics data, so it needs Analytics on.
With Analytics on, Google Analytics sets these cookies on the Intaviu website:
| Name | What it does | How long |
|---|---|---|
_ga | A random number that tells Google Analytics one browser from another. It contains nothing about you. | Google sets it for up to 2 years; Intaviu sets it to end 6 months after your last visit, and deletes it if you decline later or your choice runs out |
_ga_<id> | The same, for Intaviu's Google Analytics property (<id> is the property's measurement id), and the current visit's session. | As _ga |
With Advertising on as well, Google may also set these, according to Google:
| Name | Where | What it does | How long (per Google) |
|---|---|---|---|
_gcl_au | The Intaviu website | Links visits and purchases on Intaviu to Google's ads, to measure them. | 90 days |
_gcl_aw, _gcl_dc, _gcl_gb | The Intaviu website | Only after you arrive from an Intaviu ad: which ad click brought you, to measure it. | 90 days |
IDE | doubleclick.net (Google) | Google's advertising cookie, used to show and measure ads on other sites. | 13 months in the European Economic Area and the UK, 24 months elsewhere |
| Google account cookies | google.com (Google) | With Google signals, if you are signed in to Google and have allowed ad personalisation in your Google account, Google links these visits to your account. | As your Google account sets them |
Intaviu deletes the cookies on its own website when you turn the purpose off: the _ga cookies for Analytics, the _gcl_ cookies for Advertising. Cookies on Google's own domains (such as IDE) can only be removed by Google or in your browser; your Google account's ad settings (myadcenter.google.com) control how Google uses them.
Before anything is sent, Intaviu strips every identifier from page addresses: interview codes, links' tokens, payment references and the ids of runs, candidates and interviews are replaced by the kind of page (such as /i/[code]), and only campaign tags (utm_*) are kept from the query. Page titles are never sent. We never send names, email addresses, phone numbers, account or workspace ids, or anything from an interview.
Google signals: for visitors who are signed in to a Google account and have allowed it in their Google settings, Google can link their visits to that account, for reports across devices and on demographics and interests, and, with Advertising on, to personalise and measure Intaviu's ads. Intaviu sees only totals, never who anyone is. Google signals and ad personalisation are switched on only when you turn on Advertising.
The web room and the desktop app load nothing from Google. If you accepted on the website, the web room sends a few events (the room opened, an interview started, an interview ended with its length) to Intaviu's own server, which passes only those on to Google Analytics, with nothing for advertising. The desktop app asks for its own choice, about analytics only, and sends nothing until you accept.
Cloudflare Turnstile
Sign-up and log-in, password reset, the contact form, confirmation emails sent again, the link box on the practice page when you're signed out, and invitation pages after several wrong interview codes use Cloudflare Turnstile to check that a person is using them. Usually you see nothing; sometimes Cloudflare asks you to tick a box.
Turnstile runs in a small frame served by Cloudflare from challenges.cloudflare.com. To decide, Cloudflare processes your IP address and signals from your browser, such as its user agent and how it connects. Cloudflare states that Turnstile uses these signals only to tell people from automated programs, and not to identify, profile or target anyone. We don't switch on Turnstile's pre-clearance option, the one that would set a Cloudflare cookie (cf_clearance) for the Intaviu website. What the check sends back to Intaviu is a one-time answer, which our server confirms with Cloudflare and then discards. See Cloudflare's Turnstile privacy addendum (cloudflare.com/turnstile-privacy-policy).
Browser storage
Some things are kept in your browser's local storage, IndexedDB or cache instead of cookies. They stay in your browser and are not sent with every request.
| What | Why | How long |
|---|---|---|
iv_anon | A random id for this browser, sent with the events described below before you sign in or when you're signed out. It contains nothing about you. | Until you clear your browser's storage |
iv.theme, iv.mode, iv.navCollapsed, iv.seenActivity | Your light or dark theme, whether you last used Intaviu for business or personally, whether the dashboard menu is collapsed, and which activity you've already seen. | Until you change them or clear your browser's storage |
| Web room settings | The camera, microphone and speaker you picked, your caption and transcript settings, and the country found from your address when the room looked one up. | Until you change them or clear your browser's storage |
iv_ga_cid | Only after you accept Google Analytics, and only where there is no _ga cookie (the web room on its own): a random id for the room's events. Deleted when you decline. | Until you decline or clear your browser's storage |
iv_ga_pending | Only after you accept Google Analytics: what a checkout you started is buying and its price, so the purchase can be counted once it's paid. Never the payment reference. | Until the payment, or 1 hour |
iv.roleDraft | An unsaved interview you were editing in the dashboard, so it isn't lost if the page closes. | Until you save or discard it |
| Web room voice and speech files | The interviewer's voice and, where your browser has no speech recognition, the speech-to-text model, downloaded once so they don't download again next time. The room asks your browser to keep them. If you chose the lighter voice, that choice is remembered too. | Until you clear your browser's storage |
How we measure use
The website and web room send events to Intaviu's own servers, such as the practice interviews you view, save and start, the filters you use on practice lists and roughly how long a practice page stays open. We use them to suggest practice and next steps and to improve Intaviu, as described in our privacy notice. They go only to Intaviu, never to an analytics or advertising company.
If your browser sends Do Not Track, or we have switched off personalised recommendations at your request ([email protected]), only essential events are sent, such as a suggestion you dismissed, so it stays hidden.
Google Analytics and advertising, if you accept them, are described above. They are separate from these events: declining them changes nothing here, and switching off personalised recommendations doesn't change your cookie choices.
Other companies
Some features take you to, or load, another company's service, which may set its own cookies under its own policy:
- Signing in with Google, where it's offered, takes you to Google's sign-in page and back.
- Paying opens Paystack's checkout, in Paystack's own window over the Intaviu page or in a new tab. Paystack runs it, and may set its own cookies there.
- Video interviews on a computer load the interviewer's video from HeyGen's LiveAvatar service.
- Cloudflare Web Analytics: each page loads a small script from static.cloudflareinsights.com that reports the visit and the page's load time to Cloudflare. It sets no cookies and stores nothing in your browser, and Intaviu sees only totals.
- The website is delivered through Cloudflare's network. If Cloudflare's protection against automated traffic checks a visit, Cloudflare sets its own cookies on the Intaviu website: __cf_bm, for up to 30 minutes of inactivity, and, after you pass a challenge, cf_clearance. They are used only for that check.
Intaviu doesn't control those cookies. See each company's own cookie and privacy notices.
Your choices
Analytics and Advertising are off until you accept them, in the banner or in Cookie Settings. To say no, press Reject Non-Essential, or leave both switches off. You can change or withdraw either at any time in Cookie Settings, here or at the bottom of every page: turning one off stops it at once and deletes its cookies on the Intaviu website. Your choice lasts 6 months, then we ask again. If your browser sends Do Not Track or Global Privacy Control, both stay off. For Google's own use of advertising data, see your Google account's ad settings (myadcenter.google.com) and how Google uses information from sites that use its services (policies.google.com/technologies/partner-sites).
You can see and delete cookies and site data in your browser's settings. If you delete them, you'll be logged out, the site will go back to your browser's language and the location we find from your address, your display preferences will reset, and the web room will download the interviewer's voice again next time. Blocking storage for the Intaviu website stops sign-in and the web room from working.
Changes
We update this page when what we store changes, and show the date at the top.
Contact
Intaviu, Lagos, Nigeria. Email [email protected].