Cookies
Version of 13 September 2026. Earlier versions are available on request.
Danish rules on cookies come from the Cookie Order (cookiebekendtgørelsen), which implements the ePrivacy Directive. Consent is needed to store or read anything on your device unless it is strictly necessary to deliver a service you asked for. Everything below is either in that exception or is explained.
Why there is no banner
Because there is nothing to ask about. No analytics, no advertising pixels, no profiling, no third-party tracking — on this site or on any site generated by it. A banner asking permission for things we do not do would be theatre, and consent theatre is its own compliance problem: it trains people to click through real choices.
If that ever changes, a banner appears before the cookie does, not after.
What this site stores
| Name | What it does | Life |
|---|---|---|
livery_session | Keeps you signed in. Holds a signed reference to a session row, not your identity. | 30 days |
livery_client | The same, for a business owner signed in to their own site's portal. | 30 days |
g_state | Set only if you press Sign in with Google. Proves the sign-in that comes back is the one you started. | 10 minutes |
g_verifier | The other half of that proof (PKCE). Deleted the moment you return. | 10 minutes |
All four are HTTP-only, Secure and SameSite=Lax, and in production they carry the __Host- prefix, which stops any other site on a Livery subdomain from writing them. None is readable by JavaScript and none is shared with anyone.
The checkout
One third-party script is loaded, and only on the subscription page, only when you go there to change your plan: Paddle, who are the merchant of record. Paddle sets its own cookies to run the checkout and to detect fraud. We consider those strictly necessary to the payment you are in the middle of asking for — but they are Paddle’s, not ours, and their policy governs them: paddle.com/legal/cookies.
Nothing from Paddle loads anywhere else in the product. If you never open the subscription page, your browser never contacts them.
The anti-bot check
Cloudflare Turnstile runs on sign-up and on client contact forms. It sets no tracking cookie; it receives the IP address and a browser challenge in order to tell a person from a script. It is there so that contact forms on our customers’ sites are not turned into a spam relay.
Sites built with Livery
A generated site sets no cookies at all and ships no client-side JavaScript for tracking. The one third party a visitor may contact is Google Maps, if that site includes a map — described in the privacy notice.
If you add something to a site that does set cookies, the obligation to ask for consent moves with it, and it becomes yours as the operator of that site.
Turning them off
Your browser can block or delete cookies. Blocking the session cookies means you cannot stay signed in, which is the whole of what they do.