Delivami

Legal & Studio Compliance

Transparent agreements governing creative file delivery, pay-to-unlock escrow, payout settlement, and data sovereignty on Delivami.

Cookie Policy

Version 2026-10-27 · Last updated: November 2026

This Cookie Policy explains how Delivami Inc. (“Delivami”) uses HTTP cookies, browser localStorage keys, and consent management signals across delivami.com, app.delivami.com, and white-label client delivery portals.

1. How Our Consent Manager Works

Delivami uses a privacy-first consent gateway integrated with Google Consent Mode v2 and the Global Privacy Control (GPC) browser signal. By default, all non-essential analytics and marketing storage flags (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to denied until you explicitly opt in via our cookie banner or preferences modal.

2. Strictly Necessary Cookies & Storage (Always Active)

These cookies and storage keys are required for studio authentication, client portal security, regional currency display, and checkout fraud prevention. They cannot be switched off:

  • Better Auth Session & Security Cookies: Used on app.delivami.com to maintain your encrypted login session, enforce CSRF protection, verify TOTP two-factor authentication, and validate WebAuthn passkey step-up sessions.
  • Client Portal OTP Session Cookies: Used when a client verifies a 6-digit email or SMS passcode to view passwordless delivery portals and download unlocked master files.
  • Cloudflare Turnstile (cf_clearance): Verifies that visitors opening delivery links and login forms are human without intrusive puzzle CAPTCHAs.
  • Paystack Checkout Tokens: Set during invoice checkout and subscription billing to process PCI-DSS Level 1 payments and prevent transaction replay or card fraud.
  • Regional Routing (dlv_signup_country cookie & dlv_country localStorage): Remembers your selected operating country (GH, NG, KE, or US) for localized currency pricing for up to 12 months.
  • Creator Referral Attribution (dlv_ref): An HttpOnly cookie valid for 60 days set when a user clicks a “Delivered with Delivami” referral link (/r/<creativeId>) on a delivery, invoice, proposal, or portal so the referring creator receives their free month of Pro upon first paid invoice.
  • Consent Records (delivami-cookie-consent & delivami-consent-audit): Stores your privacy choices and a local timestamped audit log of consent updates in localStorage.

3. Performance & Analytics Cookies (Consent-Gated)

Loaded only when you enable Performance & Analytics in the cookie banner:

  • PostHog & Amplitude: Helps us understand how creators interact with delivery workflows, media players, and invoicing features so we can improve studio performance.
  • Sentry: Captures application exceptions, failed upload diagnostics, and latency metrics so our engineering team can resolve bugs rapidly.
  • Google Analytics & Tag Manager: Measures aggregate marketing site traffic and page engagement under Google Consent Mode v2.
  • Cloudflare Browser Insights: Measures real-world Core Web Vitals and edge asset load times.

4. Marketing & Advertising Cookies (Consent-Gated)

Loaded only when you enable Marketing & Advertising in the cookie banner:

  • LinkedIn Insights & Ad Measurement: Measures the effectiveness of Delivami’s B2B studio campaigns and prevents showing repetitive ads to existing subscribers.

5. Managing or Withdrawing Your Consent

You can review, update, or withdraw your cookie preferences at any time via the Manage Preferences control in our consent banner, by enabling the Global Privacy Control (GPC) header in your browser, or by clearing cookies in your browser settings. Questions may be directed to privacy@delivami.com.