Legal
This overview describes the current PHP web-hosting version, not the former Lovable implementation.
Technically necessary session identifier. It keeps sign-in, language and short-lived server states together during your session. The browser stores only the random session identifier, not your password or saved readings.
Technically necessary, randomly generated device identifier used to protect free benefits against automated or repeated use. It contains neither a name nor an email address and is not a browser fingerprint. The server stores only a non-reversible keyed hash created with the secret Paravital key.
The current PHP version does not store readings, portraits, tracking identifiers or marketing data in browser localStorage or sessionStorage. Where applicable, this data is processed server-side in the account or only temporarily in the server session.
For sign-in throttling and abuse prevention, Paravital processes a coarsened network address and the device identifier only as secret HMAC hashes. The application does not store a plaintext IP for this purpose and does not build a cross-device browser profile. Technical access logs of the web host may exist separately according to the host settings.
When payments are enabled, the payment provider processes the actual payment data. Paravital stores only provider references, amounts and status information needed for orders, subscriptions and records – not credit card numbers, security codes or online-banking credentials.
The current project does not include analytics, advertising or profiling services. The necessary security identifiers PVDEVICE and PARAVITALSESSID are not used for advertising or analytics. If such services are added later, this overview must be updated before use and any required consent implemented.
Paravital
Your reading is being prepared. Please do not submit again and keep this page open.