Loading the catalogue…
Loading the catalogue…
Registry version 2026-10-06-2
This page lists every cookie and every browser-storage key that stav.ai and the Stav customer portal set, or let a third party set. It is generated from the same list the code uses, so it cannot say less than the site does.
Only the necessary entries are set before you choose. Everything in another category waits until you allow that category in the cookie banner. You can change your choice at any time with the Cookie settings link in the footer of every page, or in the Account menu of the portal. Your choice is kept for 12 months, and we keep a record of it for the same time so we can show that we asked.
Fonts, images and scripts on stav.ai are served from our own servers in Norway. See also the Privacy Policy.
Needed for the site to work: signing in, remembering your own settings, the bot check at sign-up, and this choice. Always on.
| Name | Type | Set by | Purpose | Lifetime | Where |
|---|---|---|---|---|---|
| stav_consent | Cookie | Stavstored by Stav (NO) | Remembers your cookie choice. | 12 months | Both |
| stav_tier | Cookie | Stavstored by Stav (NO) | Remembers whether you are signed in, so the right page renders. | 24 hours | Both |
| stav_site | Cookie | Stavstored by Stav (NO) | Carries the site's launch stage. | 60 seconds | stav.ai |
| stav_access | Cookie | Stavstored by Stav (NO) | Carries how access is granted. | 60 seconds | stav.ai |
| stav_login_redirect | Cookie | Stavstored by Stav (NO) | Prevents a sign-in loop. | 5 seconds | Customer portal |
| link_state | Cookie | Stavstored by Stav (NO) | Secures the flow that connects another sign-in method. | 10 minutes | Customer portal |
| link_nonce | Cookie | Stavstored by Stav (NO) | Secures the flow that connects another sign-in method. | 10 minutes | Customer portal |
| link_conn | Cookie | Stavstored by Stav (NO) | Remembers which sign-in method is being connected. | 10 minutes | Customer portal |
| payload-token | Cookie | Stavstored by Stav (NO) | Signs a Stav editor into the content system. Editors only. | Session | stav.ai |
| appSession_app | Cookie | Auth0stored by Auth0 (EU) | Your sign-in session for the portal. | Session, renewed while you use the portal | Customer portal |
| auth_verification_app_* | Cookie | Auth0stored by Auth0 (EU) | Secures the sign-in handshake. | Until sign-in completes | Customer portal |
| __session | Cookie | Auth0stored by Auth0 (EU) | Legacy name of the sign-in session cookie. | Session | Customer portal |
| auth.stav.ai | Third-party service | Auth0stored by Auth0 (EU) | The sign-in page. Auth0 sets its own cookies on its own domain to run the login. | Session to 1 year (set by Auth0) | Both |
| checkout.stripe.com | Third-party service | Stripestored by Stripe (US) | Takes your card when you buy credits. Stripe sets its own cookies on its own pages. | 1 year (set by Stripe) | Customer portal |
| challenges.cloudflare.com | Third-party service | Cloudflarestored by Cloudflare (US) | The bot check on sign-up and the visitor playground. | 30 minutes (set by Cloudflare) | Both |
| stav.lang | Cookie | Stavstored by Stav (NO) | Your language choice. | 12 months | Both |
| stav.docs.lang | Browser storage | Stavstored by Stav (NO) | The code language you picked in the developer docs (curl, Python or Node.js). | Until you change it | stav.ai |
| stav.theme | Browser storage | Stavstored by Stav (NO) | Your light or dark theme choice. | Until you change it | Customer portal |
| stav_active_team_id | Browser storage | Stavstored by Stav (NO) | The workspace you last opened. | Until you switch workspace | Customer portal |
| stav_invite_token | Browser storage (tab) | Stavstored by Stav (NO) | Carries a workspace invitation through sign-up. | Until the tab closes | Customer portal |
| stav.models.view | Browser storage | Stavstored by Stav (NO) | Your view choice on the Models page. | Until you change it | Customer portal |
| stav.models.scroll | Browser storage (tab) | Stavstored by Stav (NO) | Where you were in the Models list, so Back returns you there. | Until the tab closes | Customer portal |
| stav.requestLog.columns.* | Browser storage | Stavstored by Stav (NO) | Your column choice in the request log. | Until you change it | Customer portal |
| stav.requestLog.panelWidth | Browser storage | Stavstored by Stav (NO) | Your panel width in the request log. | Until you change it | Customer portal |
| stav.quests.hidden-until | Browser storage | Stavstored by Stav (NO) | That you hid the getting-started card. | Until the date you chose | Customer portal |
| stav.quests.receipt-seen | Browser storage (tab) | Stavstored by Stav (NO) | That you saw a receipt in this tab. | Until the tab closes | Customer portal |
| stav.nav.collapsed | Browser storage | Stavstored by Stav (NO) | Whether the portal menu is collapsed to icons. | Until you change it | Customer portal |
| stav-playground-rail-open | Browser storage | Stavstored by Stav (NO) | Whether the playground history sidebar is open. | Until you change it | Customer portal |
| stav-playground-conversations-v1 | Browser storage | Stavstored by Stav (NO) | Your recent playground conversations, kept in your own browser. | Until you clear them | Customer portal |
| stav-visitor-credential | Browser storage (tab) | Stavstored by Stav (NO) | A short-lived key for the visitor playground after the bot check. | Until the tab closes | Customer portal |
Remembers choices that are not needed for the site to work. We set none today.
None today.
Tells us how the site is used and when it breaks, so we can improve it.
| Name | Type | Set by | Purpose | Lifetime | Where |
|---|---|---|---|---|---|
| plausible.io | Third-party service | Plausiblestored by Plausible (EU) | Counts page views and where visitors come from, without cookies or personal data. Only after you allow analytics. | No cookie; aggregated counts only | stav.ai |
| sentry.io (browser error reports) | Third-party service | Sentrystored by Sentry (EU) | Reports errors in your browser to Sentry, so we can fix them. Only after you allow analytics. | No cookie; a report is kept 90 days | Both |
Lets an advertising company measure whether an ad brought you here. Used on the public website only, never inside the portal.
None today.
Questions? roland@stav.ai