Cookie policy
Last updated: 13 June 2026
What this page covers
This page lists every cookie and similar storage item (such as localStorage entries) that Lepingukontroll places on your device - who places it, and why.
Lepingukontroll (Valukoja 6a, 11415 Tallinn) is a service operated by Avality OÜ (registry code 17484918, Äkke tn 1, 13517 Tallinn).
Categories we use
Necessary
Required for the site to work - login session, security, your consent record, and the interface language you actively select. These cannot be turned off because the service does not function correctly without them.
Experience
Improves the experience by remembering non-essential preferences. We do not currently use any functional cookies; the category is listed for transparency and to keep your consent control consistent if we ever add them.
Analytics
Anonymous usage statistics so we can understand which features get used and where the site needs work. We do not use any analytics today; the category is listed for transparency and to keep your consent control consistent if we ever add them.
Detailed inventory
The complete list of items currently in use. Maksekeskus-side cookies are set on the payment.maksekeskus.ee domain only when you go through checkout - they are governed by Maksekeskus's own privacy notice, but listed here for completeness.
Necessary cookies
| Name | Type | Provider | Location | Retention | Purpose |
|---|---|---|---|---|---|
lepinguvaht_session_token | localStorage | Avality OÜ | EE | Until cleared by you or your browser. | Anonymous session token used while you upload and analyze a contract before signing in. |
lk-consent | localStorage | Avality OÜ | EE | Until cleared, or until we materially change categories. | Stores the choices you made on the cookie banner, with timestamp and version, so we can demonstrate consent and not re-prompt you on every visit. |
sb-[...]-auth-token | localStorage | Supabase Inc. | US (EU-hosted) | Until you log out, or refresh-token expiry. | Holds your authenticated session (JWT + refresh token) after you sign in. |
sb-[...]-auth-token-code-verifier | localStorage | Supabase Inc. | US (EU-hosted) | Cleared automatically once sign-in completes. | Temporary PKCE verifier used during the email magic-link sign-in flow. |
lepinguvaht.locale | localStorage | Avality OÜ | EE | Until cleared by you or your browser. | Remembers your interface language (et / en / ru) between visits. |
payment.maksekeskus.ee (during checkout) | Cookie | Maksekeskus AS | Estonia (EU) | Per Maksekeskus's policy. | Maksekeskus sets its own cookies on payment.maksekeskus.ee to run secure checkout and fraud prevention. We never read or write these cookies; they live on Maksekeskus's domain. |
Third-party processors
Some items above are placed by third parties acting as our processors. We have a data-processing agreement (or equivalent) in place with each of them.
- Supabase Inc. (United States, EU-hosted infrastructure) - provides authentication and database hosting. Transfers outside the EEA are covered by SCCs.
- Maksekeskus AS (Estonia, EU) - handles payments. Operates entirely under EU GDPR.
- Fonts (Inter, Platypi) are self-hosted from our origin. We do not load Google Fonts; nothing is fetched from third-party font CDNs.
Managing your choices
Open the cookie settings panel at any time to change your selections. Your previous choices are pre-filled.
You can also clear all browser storage for this site through your browser's settings. Doing so will sign you out and reset your language preference. Necessary items will be re-created when you next use the site.
Changes to this policy
If we add or remove a category, change a vendor, or update what an item is used for, we bump the consent version, which makes the banner re-prompt you on your next visit so you can review the new state.
Questions
Reach us at info@avality.ee.