Cookies
Recov sets two cookies, both of them strictly necessary to keep you signed in. There is no analytics cookie and no advertising cookie, so there is nothing here to opt into or out of.
The cookies we set
| Name | Purpose | Expires | Type |
|---|---|---|---|
__Host-rowly_session |
Keeps you signed in for the current session and tells the app who you are | 15 minutes, renewed while you keep using Recov | Strictly necessary |
__Secure-rowly_refresh |
Lets your session resume after a reload without signing in again. Sent only to the sign-in part of the service | 30 days, or until you sign out | Strictly necessary |
Both cookies are httpOnly, so scripts running on the page cannot read them; Secure, so they travel only over an encrypted connection; and SameSite=Lax, so they are not sent as an ambient credential on a request started by another website.
Signing out clears both. Recov's session banner tells you whose session you are resuming after a reload, with one tap to leave — worth using on a shared machine.
Why we do not ask for your consent
UK law requires consent for cookies that are not strictly necessary. Both of Recov's cookies exist solely to deliver a service you asked for — being signed in — so the strictly necessary exemption applies and there is no banner to click through.
If we ever add a cookie that is not strictly necessary, we will ask first, and this page will say so before it appears.
What we do not set
- No analytics cookies. Recov contains no product analytics, no usage tracking and no error-reporting service.
- No advertising cookies, no advertising identifiers, and no ad networks. There is no advertising in Recov.
- No third-party cookies of any kind inside the app.
- No cross-site tracking, no fingerprinting, and no profiling for marketing.
- No IP addresses are stored anywhere in Recov.
Similar technologies
The Recov mobile app does not use cookies. It holds its sign-in token in the device's own secure storage, which serves the same purpose and is cleared when you sign out.
Recov's app serves its own typefaces, so opening a page does not call out to a font provider. This policy website loads its typefaces from Google Fonts, which sets no cookies.
Managing cookies
You can clear or block cookies in your browser's settings. Blocking Recov's two cookies will stop you being able to sign in, because they are the mechanism by which signing in works.
Related reading. Privacy notice for parents and guardians — what Recov collects and why. Your rights, and how to use them.
Version 1.0 · Effective 8 September 2026 · Last reviewed 8 September 2026 · Audience: everyone