Legal
Cookie policy
Version 2026-10-31 · updated 31 October 2026
Company details
- Name
- INOVA WORKS S.R.L.
- VAT ID
- RO53219185
- Trade register no.
- J2026000888008
- Registered office
- Str. Petru Maior nr. 26A, et. 2, ap. 12
- office@novaworks.ro
- Phone
- +40 756 109 881
- Phone
- +40 728 309 794
What cookies are
This is a translation for convenience; the Romanian version prevails.
Cookies are small files a site saves in your browser. The browser also has local storage (localStorage and sessionStorage), which works in a similar way.
On the NovaWorks site we use only strictly necessary cookies and storage, for the functions you ask for: the session, card payment, display preferences and the site’s protection. The site language is kept in the page address, not in a cookie.
The cookies we use
All of them are strictly necessary. <ref> is the identifier of our database project.
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| sb-<ref>-auth-token | NovaWorks (authentication through Supabase) | Your session: it keeps your uploaded files and quotes (also without an account, as an anonymous visitor), then your account once you sign in. | Until you sign out or the session expires; the browser keeps it for at most 400 days. | Strictly necessary |
| sb-<ref>-auth-token-code-verifier | NovaWorks (authentication through Supabase) | Ties the sign-in code sent by email to the browser that asked for it. | Until the code is used; the browser keeps it for at most 400 days. | Strictly necessary |
| __stripe_mid | Stripe, only once the card payment form opens | Fraud prevention for card payments. | 1 year | Strictly necessary |
| __stripe_sid | Stripe, only once the card payment form opens | Fraud prevention for card payments, for the current visit. | 30 minutes | Strictly necessary |
| cf_clearance | Cloudflare, only if its network is put in front of the site and asks for a check | Shows that your browser passed the network’s anti-abuse check, so it is not asked again on every page. | Usually 30 minutes (the zone setting) | Strictly necessary |
| __cf_bm | Cloudflare, only if its network is put in front of the site and asks for a check | Tells visitors from automated bots apart, to protect the site. | 30 minutes | Strictly necessary |
| _cfuvid | Cloudflare, only if its network is put in front of the site and asks for a check | Limiting abusive requests: tells apart visitors who share one IP address. | Until you close the browser | Strictly necessary |
Browser storage
We also use the browser’s local storage, only for functions you choose. The data does not leave the browser.
| Name | Where | Purpose | Duration |
|---|---|---|---|
| nw.vat | localStorage | Showing prices with or without VAT, as you chose. | Until you clear it in the browser. |
| nw.destCounty | localStorage | The delivery county you chose, for the delivery-date calendar. | Until you clear it in the browser. |
| nw.checkout.<id> | sessionStorage | The key of the order being placed, so the same order is never placed twice. | Until you close the tab. |
External services
The card payment form is loaded from Stripe only when you open it; Stripe then sets the __stripe_mid and __stripe_sid cookies for fraud prevention. On other pages Stripe is not loaded. We use no analytics tools, advertising pixels or social networks.
The Cloudflare Turnstile anti-bot check is loaded from challenges.cloudflare.com only at the steps we protect from bots (for example the first file upload and the code sent by email). It runs in a separate frame, on Cloudflare’s domain, and sets no cookies on our domain.
The site’s traffic does not pass through the Cloudflare network: from Cloudflare we use DNS and the anti-bot check. The security cookies cf_clearance, __cf_bm or _cfuvid from the table above would appear on our domain only if we put the Cloudflare network in front of the site and it asked for a check; we do not use them for statistics or advertising.
How you can control them
You can delete or block cookies and local storage in your browser settings. If you block the session cookies, you will not be able to upload files, place orders or sign in.
Changes
When the list changes, we update this page. The version and the date of the last update are shown at the top of the page.