Cookie Policy.
Effective: October 31, 2026
This Cookie Notice explains how Mellovy uses cookies and similar technologies on mellovy.com. Similar technologies include browser storage such as local storage. Our Privacy Notice explains other processing of personal data.
1. What cookies and similar technologies do
These technologies store information on, or read information from, your device. They can support a feature you request, remember a choice, or help measure how a website is used. Some technologies may share information with the provider that supplies them.
2. Technologies used on mellovy.com
Mellovy groups the technologies on mellovy.com into three categories. Necessary technologies are always on because they run the site and remember your choice. Analytics and advertising technologies store nothing on your device until you turn them on in the cookie controls. Before you choose, and after you decline, PostHog runs in its cookieless mode and Google Analytics runs with every kind of storage denied, both without a cookie, as described below. Cloudflare Web Analytics never uses a cookie.
Necessary
Mellovy stores the language you chose in the first-party cookie NEXT_LOCALE, which is removed when you close your browser.
Mellovy stores your cookie choices in the first-party cookie mellovy_consent for 182 days (about six months). It records the version of this notice, whether you turned analytics and advertising on or off, and when you made the choice.
When you sign in, or when you return to the site from a waitlist link, Mellovy sets wos-session. This first-party cookie holds your sign-in session from our provider WorkOS in encrypted form, and only our server can read it. It is removed when you close your browser, and also when you sign out or start a new sign-in.
When you join the waitlist, Mellovy also sets two first-party cookies that only our server can read. mellovy-join-pending holds the email address you entered in the first step so that the second step can finish your application. It is deleted when your waitlist entry is created or when you choose to start over, and otherwise expires after 30 minutes. mellovy-waitlist lets the status page confirm that this browser submitted an application. It holds the identifier of your waitlist entry, your email address and the status of the application, and expires after 30 days. Neither cookie is shared with any other provider.
Analytics
Mellovy uses Google Analytics 4, provided by Google Ireland Limited, to measure how the website is used, such as which pages are visited, how visitors arrive and how long a visit lasts. Google Analytics loads for every visitor in Google’s consent mode. Until you accept the analytics category, and if you decline, it runs with analytics and advertising storage denied, so it sets no cookie and sends Google cookieless pings about the page you view, your browser and the time of the visit, which Google uses to model visits. When you accept the analytics category, Mellovy grants analytics storage and Google Analytics may set _ga and _ga_SFJXCXYLC1 (up to two years). Mellovy keeps Google signals and ad personalisation signals off and never grants Google advertising storage, user data or personalisation. See Google’s description of Google Analytics cookies.
Mellovy also uses PostHog, hosted in Frankfurt, Germany, to count visits, clicks, copied text, errors and the site’s own console messages and to record sessions in which all text and form input is masked. PostHog receives the page address, which can include campaign tags, and an online identifier. PostHog stores its own first-party cookie (ph_*) and data in your browser's local storage when you accept the analytics category. PostHog also keeps a small marker in your browser's local storage (__ph_opt_in_out_ followed by our PostHog project key) that records that you accepted the analytics category. If you accept the analytics category and submit the waitlist form, your browser links its PostHog identifier to your waitlist application ID and sends how you found us (the option you chose) and the time you first submitted the form (waitlist_submitted_at). It never receives your email address, your role, what you write about the first thing you want to try in Mellovy, or any detail you type about how you found us. Until you answer, and if you decline, PostHog runs in its cookieless mode: it counts the visit without a cookie and keeps no PostHog identifier in your browser, although your browser may keep a copy of PostHog’s script in its cache. The Privacy Notice describes what PostHog receives.
Mellovy uses Cloudflare Web Analytics, from Cloudflare, Inc., to count visits and measure how fast pages load. Cloudflare adds a small script to each page that reports the page address, the referring site, your browser and the page’s loading times. It sets no cookie, stores nothing on your device and does not use your IP address to identify you. See Cloudflare’s description of Web Analytics.
Separately from these cookies, Mellovy’s own server records each page you open, for every visitor, whatever you choose here. It sets no cookie and reads nothing stored on your device. It sends PostHog the page labels together with your IP address and browser details, which PostHog uses to compute a daily visitor ID and then deletes. The Privacy Notice describes what is sent and why.
Analytics and advertising
HubSpot’s website tracking technologies are enabled only if you accept the analytics or advertising category in the cookie controls. If you decline or leave those categories off, the tracking script is not enabled and Mellovy does not store campaign attribution for later use. Depending on the cookie banner and HubSpot features enabled, HubSpot may use __hs_cookie_cat_pref and __hs_opt_out to remember your choice (each for up to six months).
After you accept analytics tracking, HubSpot may set __hstc and hubspotutk (up to six months), __hssc (30 minutes), and __hssrc (for the browser session). These cookies help recognise a visitor and measure visits and sessions. The cookies actually set depend on the HubSpot features enabled. See HubSpot’s cookie description.
Waitlist attribution
If you accept the analytics category, Mellovy remembers in your browser's session storage (mellovy:waitlist-touch) how you arrived in that tab: the domain of the website that linked to mellovy.com, not its full address, and any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term and utm_content). Session storage is cleared when you close the tab. If you then submit the waitlist application, these values are sent with it to WorkOS, which stores your application as described in the Privacy Notice. If you decline the analytics category, leave it off or withdraw your consent, Mellovy deletes the stored values and sends none of them to WorkOS. PostHog still receives the address of each page you visit, including any campaign tags in it, also in its cookieless mode. If you withdraw your consent after you have applied, contact us at [email protected]. Our waitlist provider does not let us edit an application, so we will delete your application, and you are welcome to apply again.
Website email form
The website's email-capture form is separate from optional tracking. When you submit it, Mellovy sends the email address entered, the company domain derived from that address where available, preferred language, lead-status fields, the page name and URL, and the form's data-processing notice to HubSpot. This submission does not depend on whether you accept analytics or advertising cookies. The form does not include campaign identifiers. Apart from the waitlist attribution described above, the website does not store campaign attribution in browser storage. It clears the legacy mellovy:attribution key when the page loads.
3. Consent and choices
When you first visit mellovy.com, the cookie controls let you accept all categories, decline the optional ones, or choose analytics and advertising separately. Declining is as easy as accepting. Before you choose, nothing optional is stored in your browser, and only cookieless measurement runs: PostHog in its cookieless mode, Google Analytics with storage denied, and Cloudflare Web Analytics. You can change your choice at any time through Cookie settings, which is linked in the website footer. If you withdraw consent, the website denies Google Analytics storage again and deletes its cookies from the mellovy.com domain. PostHog stops cookie-based tracking and runs in the cookieless mode described above. PostHog removes its ph_* cookie, the marker and the data it stored in your browser's local and session storage. The waitlist attribution is deleted from session storage. Declining those categories does not prevent you from submitting the website email form.
For questions about website technologies, contact [email protected].
4. Legal framework
Article 5(3) of the EU ePrivacy Directive (2002/58/EC) sets the European rule for storing or accessing information on a user's device. In Sweden, the rule is implemented by Chapter 9, Section 28 of the Electronic Communications Act (2022:482). Personal data collected through cookies or similar technologies is also subject to the GDPR and the Swedish Data Protection Act where applicable.
5. Contact
Mellovy AB
Lyngavägen 15G
305 64 Gullbrandstorp, Sweden
[email protected]