1How to withdraw consent
- getamevia.com: use the cookie banner, or open Privacy settings. Essential account cookies are removed by signing out.
- Customer websites: use that site’s CMP, or call window.Amevia.setConsent({ analytics: false, personalization: false, authenticatedIdentity: false, resumeConversation: false }). That stops optional tracking and deletes Amevia’s optional keys. It does not delete the host cookie amevia_visitor.
- You can also use browser controls to delete site data.
2getamevia.com
| Name | Type | Category | Purpose | Data | Duration | Set by |
|---|---|---|---|---|---|---|
| amevia_session | Cookie (httpOnly) | Essential | Signed-in workspace session | Signed user and organisation identifiers (not name/email in the cookie) | Up to 14 days if “remember me”, otherwise browser session (token max 24h) | Amevia |
| amevia_impersonator | Cookie (httpOnly) | Essential | Restore a platform-admin session after “log in as” | Signed admin identifiers | Browser session | Amevia |
| amevia_oauth_state / amevia_oauth_meta | Cookie | Essential | Google sign-in CSRF and return path | OAuth state | Short-lived ceremony | Amevia |
| amevia_webauthn_challenge | Cookie (httpOnly) | Essential | Passkey login/register ceremony | One-time challenge | Up to 5 minutes | Amevia |
| amevia-theme | Cookie + localStorage | Essential (functional) | Dashboard/admin colour scheme | light or dark | 1 year / until cleared | Amevia |
| amevia_site_consent | localStorage | Essential (consent record) | Remember that only essential storage is used on the public site | Categories, timestamp, policy version — no name or email | Until cleared | Amevia |
Name
amevia_session
Type
Cookie (httpOnly)
Category
Essential
Purpose
Signed-in workspace session
Data
Signed user and organisation identifiers (not name/email in the cookie)
Duration
Up to 14 days if “remember me”, otherwise browser session (token max 24h)
Set by
Amevia
Name
amevia_impersonator
Type
Cookie (httpOnly)
Category
Essential
Purpose
Restore a platform-admin session after “log in as”
Data
Signed admin identifiers
Duration
Browser session
Set by
Amevia
Name
amevia_oauth_state / amevia_oauth_meta
Type
Cookie
Category
Essential
Purpose
Google sign-in CSRF and return path
Data
OAuth state
Duration
Short-lived ceremony
Set by
Amevia
Name
amevia_webauthn_challenge
Type
Cookie (httpOnly)
Category
Essential
Purpose
Passkey login/register ceremony
Data
One-time challenge
Duration
Up to 5 minutes
Set by
Amevia
Name
amevia-theme
Type
Cookie + localStorage
Category
Essential (functional)
Purpose
Dashboard/admin colour scheme
Data
light or dark
Duration
1 year / until cleared
Set by
Amevia
Name
amevia_site_consent
Type
localStorage
Category
Essential (consent record)
Purpose
Remember that only essential storage is used on the public site
Data
Categories, timestamp, policy version — no name or email
Duration
Until cleared
Set by
Amevia
There is no third-party advertising or marketing analytics cookie on getamevia.com in this implementation. The public-site chat widget follows the same default-deny rules as customer embeds.
3Widget on customer websites (first-party to that site)
| Name | Type | Category | Purpose | Data | Duration | When set |
|---|---|---|---|---|---|---|
| amevia_widget_consent | localStorage | Essential (consent record) | Store the last setConsent() choice | Booleans + timestamp + widget version | Until withdrawn or cleared | After setConsent() |
| amevia_sid_<agentId> | sessionStorage | Essential | Active chat thread for this tab | Conversation id only | Tab/session | When a conversation starts |
| amevia_closed_<agentId> | sessionStorage | Essential | Show the closed-chat card in this tab | Timestamp, conversation id, reason | Up to 1 hour / tab | When a chat is closed |
| amevia_vid | Cookie + localStorage | Analytics | Visitor Monitor identifier | Random key (not name/email) | 1 year | Only if analytics consent is true |
| amevia_dp | Cookie (probe) | Analytics / resume | Detect registrable cookie domain | Literal 1 | Seconds, then deleted | Only if analytics or resume is allowed |
| amevia_conv_<agentId> | Cookie + localStorage | Resume (optional) | Resume a conversation across visits/subdomains | Conversation id only | Up to 30 days | Only if resumeConversation is true |
| amevia_open_<agentId> / amevia_locale_<agentId> | localStorage | Personalization | Remember open panel and UI language | 0/1 or locale code | Until withdrawn | Only if personalization is true |
Name
amevia_widget_consent
Type
localStorage
Category
Essential (consent record)
Purpose
Store the last setConsent() choice
Data
Booleans + timestamp + widget version
Duration
Until withdrawn or cleared
When set
After setConsent()
Name
amevia_sid_<agentId>
Type
sessionStorage
Category
Essential
Purpose
Active chat thread for this tab
Data
Conversation id only
Duration
Tab/session
When set
When a conversation starts
Name
amevia_closed_<agentId>
Type
sessionStorage
Category
Essential
Purpose
Show the closed-chat card in this tab
Data
Timestamp, conversation id, reason
Duration
Up to 1 hour / tab
When set
When a chat is closed
Name
amevia_vid
Type
Cookie + localStorage
Category
Analytics
Purpose
Visitor Monitor identifier
Data
Random key (not name/email)
Duration
1 year
When set
Only if analytics consent is true
Name
amevia_dp
Type
Cookie (probe)
Category
Analytics / resume
Purpose
Detect registrable cookie domain
Data
Literal 1
Duration
Seconds, then deleted
When set
Only if analytics or resume is allowed
Name
amevia_conv_<agentId>
Type
Cookie + localStorage
Category
Resume (optional)
Purpose
Resume a conversation across visits/subdomains
Data
Conversation id only
Duration
Up to 30 days
When set
Only if resumeConversation is true
Name
amevia_open_<agentId> / amevia_locale_<agentId>
Type
localStorage
Category
Personalization
Purpose
Remember open panel and UI language
Data
0/1 or locale code
Duration
Until withdrawn
When set
Only if personalization is true
Raw chat transcripts are not stored in localStorage. amevia_hist_* is no longer written. Name, email and host user ids are not stored in Amevia cookies. Chat can run without analytics consent.