Cookie Policy
Last updated: August 25, 2026
This Cookie Policy explains how Magma Company GmbH uses cookies and similar technologies in Diavisor and on our websites.
The short version: we use only what is strictly necessary to keep you signed in and the Service secure. We run no analytics, no advertising, and no tracking of any kind.
1. What cookies are
Cookies are small text files stored on your device by a website. Similar technologies include browser local storage, session storage, and — on mobile — the operating system's secure keychain. This policy covers all of them.
2. What we use
2.1. Strictly necessary — web application
These are required for the Service to work. They cannot be switched off without breaking sign-in, and they do not require consent under Article 5(3) of the ePrivacy Directive or Article 45c(b) of the Swiss Telecommunications Act.
| Name | Type | Purpose | Retention |
|---|---|---|---|
| Session cookie | HTTP cookie, HttpOnly, Secure, SameSite | Keeps your signed-in session between requests | Session, or up to 120 minutes of inactivity |
| CSRF token | HTTP cookie | Protects against cross-site request forgery | Session |
| Authentication token | Browser local storage | Authenticates your API requests | Until you sign out |
2.2. Strictly necessary — mobile application
The Diavisor iOS app does not use cookies. It stores:
| Item | Where | Purpose | Retention |
|---|---|---|---|
| Authentication token | iOS Keychain, device-only, not synced to iCloud | Keeps you signed in | Until you sign out or delete your account |
| Cached insulin settings | App storage | Lets the calculator work offline | Until you sign out or a different account signs in |
| Locally recorded doses pending sync | App storage (SwiftData) | Lets you record a dose offline | Until synced and cleared, or you sign out |
| Identifiers of alerts already shown | App preferences | Stops the same alert notifying you twice | Rolling, last 100 alerts |
All of the above is cleared from the device when you sign out, when a different account signs in, or when you delete your account.
2.3. This legal website
legal.diavisor.com is a set of static pages. It sets no cookies at all and contains no analytics, no tracking pixels, and no embedded third-party content.
3. What we do not use
We do not use, and have never used, in Diavisor or on our websites:
- analytics cookies or product analytics of any kind;
- advertising, retargeting, or conversion-tracking pixels;
- session recording, heatmaps, or behavioural analytics;
- social media tracking plugins;
- device fingerprinting;
- cross-site or cross-device tracking.
Because we set no non-essential cookies, there is no cookie consent banner and nothing to opt out of. If that ever changes, we will ask for your consent before setting anything non-essential, and will update this policy first.
4. Third parties
No third party sets cookies through Diavisor.
Some features send data to third parties in order to work — for example, estimating carbohydrates from a meal photograph. That is data transmission, not cookie-based tracking, and it is covered in our Privacy Policy and Sub-processors pages.
5. Managing cookies in your browser
You can block or delete cookies in your browser settings. Because we only set strictly necessary cookies, blocking them will prevent you from signing in to the web application. Your browser's help documentation explains how.
On iOS, you can remove everything Diavisor stores on your device by signing out or deleting the app.
6. Changes to this policy
We may update this Cookie Policy. The current version is always published at legal.diavisor.com/cookie-policy, with the revision date at the top.
7. Contact
Magma Company GmbH Salvemattweg 11 6340 Baar (ZG) Switzerland
Email: support@diavisor.com