Legal & Privacy
Cookies & Local Storage
Draft: some details are still pending These pages describe how DEIV works today, based on a technical review of its code. Items marked PENDING must still be provided by the operator, and the texts have not yet been reviewed by a lawyer.
DEIV uses as little browser storage as it can. This page lists every cookie and storage item it uses, what each is for and how long it lasts.
In short
- Signing in sets two strictly necessary cookies: one keeps you signed in, the other lets the sign-in protection recognise this browser. When the operator signs in with the operator's own credential, a third one marks the operator's session; visitors never receive it. A fourth one remembers your choice if you opt out of visit counting, and a fifth one remembers your language if you choose one. A sixth one keeps your access ID, only if you ask for access to one of the Company Optimizer tools.
- Your work is kept in your browser's storage so that it stays on your device.
- There are no advertising cookies, no third-party cookies, no third-party scripts and no cross-site tracking. The sign-in cookie is also used, in hashed form, to count distinct sessions per day (see the table; you can opt out); that count cannot link your visits from one day to the next.
Browser storage
| Name | Type | Purpose | Duration | Strictly necessary |
|---|---|---|---|---|
deiv-workspace | IndexedDB (browser database) | Your whole DEIV workspace: your company and buildings, imported accounting files, decisions, scenarios, alerts, watchlists, notes, saved chat batches and private settings. A copy is sent to the server when you open DEIV in a tab, so that it can calculate your results. | Until you remove it or clear this site's data; kept when you sign out | Yes (your data) |
deiv-runs | IndexedDB (browser database) | Only for visitors who use an authorized run of Best Company, Target Planner or Optimize My Company: the results delivered to you, each with the hash of its receipt, so that you can open them again in “Your runs” without using another run. Your browser checks each copy against its receipt before showing it. Up to the last 20 results. When your workspace is kept only in the current tab, they are kept only in that tab's memory. They are not sent to DEIV's server. | Until you remove a result (“Remove from this browser”) or clear this site's data; kept when you sign out | Yes (your data) |
deiv.theme deiv.lang deiv.save | localStorage | Your theme, your language and where your work is saved (in this browser or in this tab only). | Until you clear this site's data | Yes (your choice) |
deiv.welcome deiv.guide | localStorage | Whether you have seen the welcome screens and the introductions to each section. No company data. | Until you clear this site's data | Yes (pending legal review) |
deiv.alertcheck.last | localStorage | A time stamp only, so that several open tabs share one alert check every 5 minutes. | Until you clear this site's data | Yes (pending legal review) |
deiv.sandbox.v1 deiv.opt.owned deiv.calc.history deiv.calc.state deiv.prospect.v1 deiv.lbi.cmp deiv.retail.scenarios deiv.retail.scenarios.options deiv.retail.calc deiv.xp.calc | localStorage | The last inputs of calculators and tools (Simulation Lab, the stock entered in Optimize My Company, calculator history, Prospecting, leaderboard comparison, retail scenarios, XP calculator), so that they reopen as you left them. Some contain figures from your company. They are not included in backups and are not deleted by Local Data & Backup › Remove. | Until you clear this site's data | No (functional) |
deiv.di deiv.obj deiv.mk.rid deiv.mk.q deiv.mk.buy deiv.opp deiv.gp.<id> deiv.bsort deiv.sim.focus deiv.catq deiv.cattab deiv.fin.* deiv.up deiv.rs deiv.lab.bt deiv.guide.session | sessionStorage (this tab only) | What a screen remembers while this tab is open: filters, sorting, the selected tab, form contents, the selected product and the last game-price result (discarded after 2 hours). | Until you close the tab | No (functional) |
deiv.ws.session | sessionStorage (this tab only) | Only in session-only mode: the random identifier of your temporary copy on the server, so that a reload can reconnect to it. It only works together with your own session cookie. | Until you close the tab | Yes (pending legal review) |
deiv.acc.key.<tool> | sessionStorage (this tab only) | Only while you start an authorized run: the random request key of the run you confirmed, kept until the server answers, so that a repeated request (for example after a lost connection or a reload) never uses a second authorized run. It grants nothing by itself. | Until the server answers that start, or until you close the tab | Yes (for the access you asked for) |
deiv-shell-v… | Cache Storage (offline copy) | A copy of DEIV's own files (pages, styles, scripts and the interface's language files) so that the app starts quickly and works offline. It never contains your data or the server's answers to the app's requests. | Until a new version replaces it or you clear this site's data; kept when you sign out | Yes (pending legal review) |
BroadcastChannel deiv-workspace BroadcastChannel deiv-alertcheck navigator.storage.persist() | Browser messaging and storage setting | Messages without data that tell your other DEIV tabs to refresh or to share the alert check, and, only if you click “Ask the browser to keep my data”, a request that the browser does not delete DEIV's storage when space runs low. | Nothing is stored by the messages; the storage setting lasts until you clear this site's data | Yes (pending legal review) |
deiv-backup-YYYY-MM-DD.json deiv-research-….html | File you download | Files created only when you click: a backup of your workspace with an integrity check, or a research report. A backup never contains the access code, the session cookie or any other secret. | On your device until you delete it | No (your choice) |
Items marked “functional” only remember what you typed or chose, so that a screen reopens as you left it. They stay on your device, nobody else reads them and they are not used for tracking.
Why there is no cookie banner
European rules (Article 5(3) of the ePrivacy Directive and the national laws that implement it, such as the UK's PECR) require consent before information is stored on or read from your device, unless it is strictly necessary for a service you have explicitly asked for. DEIV treats the sign-in cookie, the known-browser cookie (sign-in security), your workspace storage and your preferences as falling under that exemption, so it does not show a consent banner. The functional items only keep your own inputs on your device for the tool you are using. Whether the exemption also covers the following is pending legal review: the functional items (storage of your inputs and of the interface state), the record of the welcome screens you have seen, the alert-check time stamp, the offline copy of DEIV's files, the session-only workspace identifier, the messages between tabs and the storage request, the language cookie, and the persistence of the sign-in cookie (24 hours) and of the known-browser cookie (30 days).
The anonymous usage counts are designed to meet the conditions that European data-protection authorities set for audience measurement without consent: first-party only, aggregate daily totals, no cross-site tracking, no sharing, and a simple way to object. Not every authority applies this exemption in the same way, and this assessment is pending legal review.
Visit counting: your choice
Visit counting
On this browser, your visits are counted in the anonymous daily totals.
Your browser still tells the server which screen you open, but the server discards it without counting it. Totals of server errors are still counted, because they describe DEIV's health rather than your visit.
How to remove stored data
- Your workspace: after signing in, go to Local Data & Backup › Remove.
- Everything DEIV stored in this browser, including preferences, tool inputs and the offline copy: use your browser's option to clear site data for this website.
- Signing out deletes the sign-in cookie and ends the session on the server. It keeps your workspace in this browser on purpose; your tool inputs, the known-browser cookie, the language cookie and your visit-counting choice also stay.
Third-party content
DEIV loads no third-party scripts, fonts, images or cookies: everything a page shows comes from DEIV itself. Company logos in the Leaderboard and the Newspaper are copies kept by DEIV's server: when the SimcoTools data gives a company a logo, the server downloads that image once from the game's image host and checks for changes at most every 14 days. A company without a logo, or whose image DEIV does not have yet, shows its initials, drawn in your browser.